Verify AppWidget ownership during update.

Bug: 5563081 Change-Id: I528ec944d404989bb21b32ef01feb3d35e23d3ad
2011-11-03 11:26:11 -07:00
parent 163e6443f2
commit 933decaa5e
1 changed files with 4 additions and 1 deletions
--- a/services/java/com/android/server/AppWidgetService.java
+++ b/services/java/com/android/server/AppWidgetService.java
@@ -751,10 +751,13 @@ class AppWidgetService extends IAppWidgetService.Stub
                return;
            }
            ArrayList<AppWidgetId> instances = p.instances;
+            final int callingUid = getCallingUid();
            final int N = instances.size();
            for (int i=0; i<N; i++) {
                AppWidgetId id = instances.get(i);
-                updateAppWidgetInstanceLocked(id, views);
+                if (canAccessAppWidgetId(id, callingUid)) {
+                    updateAppWidgetInstanceLocked(id, views);
+                }
            }
        }
    }