[pm] restrict PackageInstaller getMySessions() results based on calling UIDs am: 222a6b43a5 am: 7b17f2b74c

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/15146213 Change-Id: I2e201dbe9b9a75b79ce9f8de59e52764e0176fa9
2021-07-01 16:09:57 +00:00
parent fc7a47254f 7b17f2b74c
commit b50deaed3e
1 changed files with 2 additions and 1 deletions
--- a/services/core/java/com/android/server/pm/PackageInstallerService.java
+++ b/services/core/java/com/android/server/pm/PackageInstallerService.java
@@ -989,7 +989,8 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
                SessionInfo info =
                        session.generateInfoForCaller(false /*withIcon*/, Process.SYSTEM_UID);
                if (Objects.equals(info.getInstallerPackageName(), installerPackageName)
-                        && session.userId == userId && !session.hasParentSessionId()) {
+                        && session.userId == userId && !session.hasParentSessionId()
+                        && isCallingUidOwner(session)) {
                    result.add(info);
                }
            }