From d0063106b67c9aa44d9473102a1116aad136f50f Mon Sep 17 00:00:00 2001 From: Jim Miller Date: Tue, 28 Jun 2016 16:43:57 -0700 Subject: [PATCH] Relax security constraint around getAuthenticatorId(). Fixes bug 28603656 Change-Id: I54216d4b9a3ab23f9d5bfe0f40f2dd27e723c21e --- .../server/fingerprint/FingerprintService.java | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/services/core/java/com/android/server/fingerprint/FingerprintService.java b/services/core/java/com/android/server/fingerprint/FingerprintService.java index cc556c7e45b34..081a3afd048fe 100644 --- a/services/core/java/com/android/server/fingerprint/FingerprintService.java +++ b/services/core/java/com/android/server/fingerprint/FingerprintService.java @@ -1019,14 +1019,12 @@ public class FingerprintService extends SystemService implements IBinder.DeathRe } } + /*** + * @param opPackageName the name of the calling package + * @return authenticator id for the current user + */ public long getAuthenticatorId(String opPackageName) { - if (canUseFingerprint(opPackageName, false /* foregroundOnly */, - Binder.getCallingUid(), Binder.getCallingPid())) { - return mCurrentAuthenticatorId; - } else { - Slog.w(TAG, "Client isn't current, returning authenticator_id=0"); - } - return 0; + return mCurrentAuthenticatorId; } }