From 932fd9bda0498834ee8310af222336740ba7695d Mon Sep 17 00:00:00 2001
From: Kevin Chyn <kchyn@google.com>
Date: Thu, 14 May 2020 16:29:24 -0700
Subject: [PATCH] Add missing permission check for addLockoutResetCallback

This is not a public API and is lacking permission checks

Bug: 155988975

Test: No permission error from keyguard
Change-Id: I5e3eeb869f1373d6a08470815ea673190b7598f6
---
 .../server/biometrics/fingerprint/FingerprintService.java        | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/core/java/com/android/server/biometrics/fingerprint/FingerprintService.java b/services/core/java/com/android/server/biometrics/fingerprint/FingerprintService.java
index 8520f5aa0632a..d90f3afd8dca4 100644
--- a/services/core/java/com/android/server/biometrics/fingerprint/FingerprintService.java
+++ b/services/core/java/com/android/server/biometrics/fingerprint/FingerprintService.java
@@ -330,6 +330,7 @@ public class FingerprintService extends BiometricServiceBase {
         @Override
         public void addLockoutResetCallback(final IBiometricServiceLockoutResetCallback callback)
                 throws RemoteException {
+            checkPermission(USE_BIOMETRIC_INTERNAL);
             FingerprintService.super.addLockoutResetCallback(callback);
         }