Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DO NOT MERGE Add permission checks before delivery am: ca643c5c33

Browse Source 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/12198208

Change-Id: Id1723478e8616b60be28d12ccaa4705d6a87395b
This commit is contained in:
Soonil Nagarkar
2020-07-31 20:05:48 +00:00
committed by Automerger Merge Worker
parent 6248935fc1 ca643c5c33
commit 379d64ea00
1 changed files with 30 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
services/core/java/com/android/server/location/AppOpsHelper.java
View File

@@ -18,7 +18,9 @@ package com.android.server.location;
import static android.app.AppOpsManager.OP_MONITOR_HIGH_POWER_LOCATION;
import static android.app.AppOpsManager.OP_MONITOR_LOCATION;
import static android.content.pm.PackageManager.PERMISSION_GRANTED;
import static com.android.server.location.CallerIdentity.PERMISSION_NONE;
import static com.android.server.location.LocationManagerService.D;
import static com.android.server.location.LocationManagerService.TAG;
@@ -122,8 +124,18 @@ public class AppOpsHelper {
Preconditions.checkState(mAppOps != null);
}
if (callerIdentity.permissionLevel == PERMISSION_NONE) {
return false;
}
long identity = Binder.clearCallingIdentity();
try {
if (mContext.checkPermission(
CallerIdentity.asPermission(callerIdentity.permissionLevel), callerIdentity.pid,
callerIdentity.uid) != PERMISSION_GRANTED) {
return false;
}
return mAppOps.checkOpNoThrow(
CallerIdentity.asAppOp(callerIdentity.permissionLevel),
callerIdentity.uid,
@@ -138,8 +150,24 @@ public class AppOpsHelper {
* called right before a location is delivered, and if it returns false, the location should not
* be delivered.
*/
public boolean noteLocationAccess(CallerIdentity identity) {
return noteOpNoThrow(CallerIdentity.asAppOp(identity.permissionLevel), identity);
public boolean noteLocationAccess(CallerIdentity callerIdentity) {
if (callerIdentity.permissionLevel == PERMISSION_NONE) {
return false;
}
long identity = Binder.clearCallingIdentity();
try {
if (mContext.checkPermission(
CallerIdentity.asPermission(callerIdentity.permissionLevel), callerIdentity.pid,
callerIdentity.uid) != PERMISSION_GRANTED) {
return false;
}
} finally {
Binder.restoreCallingIdentity(identity);
}
return noteOpNoThrow(CallerIdentity.asAppOp(callerIdentity.permissionLevel),
callerIdentity);
}
/**