Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix:

Browse Source 
avoid the potential attack on SlicePermissionActivity

Bug: 288215072

Analysis:
Third-party apps may pass malformed data, causing getParcelableExtra method to throw an exception.

Change-Id: I9e37728897a31a361af3a183983b646da0918b63
This commit is contained in:
hukaixiang
2023-06-21 17:17:18 +08:00
parent 3e77c6f37e
commit b26f1462ca
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java
View File

@@ -51,7 +51,11 @@ public class SlicePermissionActivity extends Activity implements OnClickListener
super.onCreate(savedInstanceState);
// Verify intent is valid
mUri = getIntent().getParcelableExtra(SliceProvider.EXTRA_BIND_URI);
try {
mUri = getIntent().getParcelableExtra(SliceProvider.EXTRA_BIND_URI);
} catch (Exception e) {
Log.w(TAG, "Failed to getParcelableExtra", e);
}
mCallingPkg = getIntent().getStringExtra(SliceProvider.EXTRA_PKG);
if (mUri == null
|| !SliceProvider.SLICE_TYPE.equals(getContentResolver().getType(mUri))