[DO NOT MERGE] Fix permanent denial of service via setComponentEnabledSetting

Do not update invalid component enabled settings to prevent the
malicious apps from exhausting system server memory.

Bug: 240936919
Test: atest android.security.cts.PackageManagerTest
Change-Id: I08165337895e89f13a2b9fcce1201cba9ad13d7d
This commit is contained in:
Rhed Jao
2022-09-26 21:35:26 +08:00
parent 5a292b8bf4
commit 4d13148a3f

View File

@@ -21485,6 +21485,9 @@ public class PackageManagerService extends IPackageManager.Stub
} else {
Slog.w(TAG, "Failed setComponentEnabledSetting: component class "
+ className + " does not exist in " + packageName);
// Safetynet logging for b/240936919
EventLog.writeEvent(0x534e4554, "240936919", callingUid);
return;
}
}
switch (newState) {