From e758539f0266aa24c535e9da17b845b10b00c4f7 Mon Sep 17 00:00:00 2001 From: Nate Myren Date: Wed, 4 Aug 2021 13:22:06 -0700 Subject: [PATCH] Remove calling UID check from ContentProvider AttributionSource checks calling UID on unparcel (so the check is not necessary), and some ContentProviders may clear calling identity. Test: Manual Fixes: 188755312 Change-Id: If629eea3ba8c1a57fd4b7aff0fec2c0acb5f69be --- core/java/android/content/ContentProvider.java | 3 --- 1 file changed, 3 deletions(-) diff --git a/core/java/android/content/ContentProvider.java b/core/java/android/content/ContentProvider.java index a741f9649b4ce..c714f507242e2 100644 --- a/core/java/android/content/ContentProvider.java +++ b/core/java/android/content/ContentProvider.java @@ -745,9 +745,6 @@ public abstract class ContentProvider implements ContentInterface, ComponentCall if (Binder.getCallingPid() == Process.myPid()) { return PermissionChecker.PERMISSION_GRANTED; } - if (!attributionSource.checkCallingUid()) { - return PermissionChecker.PERMISSION_HARD_DENIED; - } return PermissionChecker.checkPermissionForDataDeliveryFromDataSource(getContext(), permission, -1, new AttributionSource(getContext().getAttributionSource(), attributionSource), /*message*/ null);