[DO NOT MERGE] Fix permanent denial of service via setComponentEnabledSetting
Do not update invalid component enabled settings to prevent the malicious apps from exhausting system server memory. Bug: 240936919 Test: atest android.security.cts.PackageManagerTest Change-Id: I08165337895e89f13a2b9fcce1201cba9ad13d7d
This commit is contained in:
@@ -21485,6 +21485,9 @@ public class PackageManagerService extends IPackageManager.Stub
|
|||||||
} else {
|
} else {
|
||||||
Slog.w(TAG, "Failed setComponentEnabledSetting: component class "
|
Slog.w(TAG, "Failed setComponentEnabledSetting: component class "
|
||||||
+ className + " does not exist in " + packageName);
|
+ className + " does not exist in " + packageName);
|
||||||
|
// Safetynet logging for b/240936919
|
||||||
|
EventLog.writeEvent(0x534e4554, "240936919", callingUid);
|
||||||
|
return;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
switch (newState) {
|
switch (newState) {
|
||||||
|
|||||||
Reference in New Issue
Block a user