[pm] restrict PackageInstaller getMySessions() results based on calling UIDs am: 222a6b43a5

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/15146213 Change-Id: I42061fe615bce5ddf84551a1e48405449effec4f
2021-07-01 15:57:41 +00:00
parent fb8984936d 222a6b43a5
commit 7b17f2b74c
1 changed files with 2 additions and 1 deletions
--- a/services/core/java/com/android/server/pm/PackageInstallerService.java
+++ b/services/core/java/com/android/server/pm/PackageInstallerService.java
@@ -989,7 +989,8 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
                SessionInfo info =
                        session.generateInfoForCaller(false /*withIcon*/, Process.SYSTEM_UID);
                if (Objects.equals(info.getInstallerPackageName(), installerPackageName)
-                        && session.userId == userId && !session.hasParentSessionId()) {
+                        && session.userId == userId && !session.hasParentSessionId()
+                        && isCallingUidOwner(session)) {
                    result.add(info);
                }
            }