Merge "Enforce cross user permission to queryContentProviders api"

This commit is contained in:
Rhed Jao
2022-07-13 01:54:17 +00:00
committed by Android (Google) Code Review

View File

@@ -5008,6 +5008,8 @@ public class ComputerEngine implements Computer {
final int callingUid = Binder.getCallingUid();
final int userId = processName != null ? UserHandle.getUserId(uid)
: UserHandle.getCallingUserId();
enforceCrossUserPermission(callingUid, userId, false /* requireFullPermission */,
false /* checkShell */, "queryContentProviders");
if (!mUserManager.exists(userId)) return ParceledListSlice.emptyList();
flags = updateFlagsForComponent(flags, userId);
ArrayList<ProviderInfo> finalList = null;