Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Adds caller check to getAllPackages()" into oc-mr1-dev

Browse Source
This commit is contained in:
TreeHugger Robot
2021-03-03 18:05:52 +00:00
committed by Android (Google) Code Review
parent 119ebe193f cca5bf9282
commit 835ab4eb82
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -6541,6 +6541,11 @@ public class PackageManagerService extends IPackageManager.Stub
@Override @Override
public List<String> getAllPackages() { public List<String> getAllPackages() {
final int callingUid = Binder.getCallingUid(); final int callingUid = Binder.getCallingUid();
// enforceSystemOrRootOrShell:
if (callingUid != Process.SYSTEM_UID && callingUid != Process.ROOT_UID
&& callingUid != Process.SHELL_UID) {
throw new SecurityException("getAllPackages is limited to privileged callers");
}
final int callingUserId = UserHandle.getUserId(callingUid); final int callingUserId = UserHandle.getUserId(callingUid);
synchronized (mPackages) { synchronized (mPackages) {
if (canViewInstantApps(callingUid, callingUserId)) { if (canViewInstantApps(callingUid, callingUserId)) {