Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Apply visibility to #getSuspendedPackageLauncherExtras

Browse Source 
Callers shouldn't be able to get the launcher extras if the target
package isn't visible to them.

Bug: 202298672
Test: atest AppEnumerationTests
Test: atest SuspendPackagesTest
Test: manually using the PoC in the buganizer to ensure the symptom
      no longer exists.

Change-Id: Iad37765710b0b13f9c338bbacdd68be5d2574d22
This commit is contained in:
Jackal Guo
2021-10-13 14:02:59 +08:00
parent 2417a8a446
commit a978e6f5fa
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
services/core/java/com/android/server/pm/LauncherAppsService.java
View File

@@ -746,11 +746,15 @@ public class LauncherAppsService extends SystemService {
@Override
public Bundle getSuspendedPackageLauncherExtras(String packageName,
UserHandle user) {
if (!canAccessProfile(user.getIdentifier(), "Cannot get launcher extras")) {
final int callingUid = injectBinderCallingUid();
final int userId = user.getIdentifier();
if (!canAccessProfile(userId, "Cannot get launcher extras")) {
return null;
}
return mPackageManagerInternal.getSuspendedPackageLauncherExtras(packageName,
user.getIdentifier());
if (mPackageManagerInternal.filterAppAccess(packageName, callingUid, userId)) {
return null;
}
return mPackageManagerInternal.getSuspendedPackageLauncherExtras(packageName, userId);
}
@Override