Merge "Verify caller before auto granting slice permission" into qt-dev am: 3d226b76c1

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17089346

Change-Id: I20932910644a9d4ca4b3a46c4e4b9f96d504adf6
This commit is contained in:
TreeHugger Robot
2022-03-09 06:08:50 +00:00
committed by Automerger Merge Worker

View File

@@ -237,6 +237,8 @@ public class SliceManagerService extends ISliceManager.Stub {
if (autoGrantPermissions != null && callingPkg != null) {
// Need to own the Uri to call in with permissions to grant.
enforceOwner(callingPkg, uri, userId);
// b/208232850: Needs to verify caller before granting slice access
verifyCaller(callingPkg);
for (String perm : autoGrantPermissions) {
if (mContext.checkPermission(perm, pid, uid) == PERMISSION_GRANTED) {
int providerUser = ContentProvider.getUserIdFromUri(uri, userId);