Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added missing permission check to isPackageDeviceAdminOnAnyUser.

Browse Source 
am: 18e7dedf6c

Change-Id: I3cd02487a2f39775e86c22ed12fb0fae45198ba4
This commit is contained in:
Varun Shah
2019-04-09 12:12:19 -07:00
committed by android-build-merger
parent 21c4a58435 18e7dedf6c
commit 5e3ef6a1ea
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -18913,6 +18913,12 @@ public class PackageManagerService extends IPackageManager.Stub
@Override @Override
public boolean isPackageDeviceAdminOnAnyUser(String packageName) { public boolean isPackageDeviceAdminOnAnyUser(String packageName) {
final int callingUid = Binder.getCallingUid(); final int callingUid = Binder.getCallingUid();
if (checkUidPermission(android.Manifest.permission.MANAGE_USERS, callingUid)
!= PERMISSION_GRANTED) {
EventLog.writeEvent(0x534e4554, "128599183", -1, "");
throw new SecurityException(android.Manifest.permission.MANAGE_USERS
+ " permission is required to call this API");
}
if (getInstantAppPackageName(callingUid) != null if (getInstantAppPackageName(callingUid) != null
&& !isCallerSameApp(packageName, callingUid)) { && !isCallerSameApp(packageName, callingUid)) {
return false; return false;