Merge \\\"Check caller\\\'s uid before allowing notification policy access.\\\" into mnc-dev am: 234e1c25e4 am: 8e8bb6633c
am: 5c6db3af89
Change-Id: Ie212c6105f8796f0e7c4ccf25ea132b8c9f99519
This commit is contained in:
@@ -1643,6 +1643,7 @@ public class NotificationManagerService extends SystemService {
|
||||
}
|
||||
|
||||
private void enforcePolicyAccess(String pkg, String method) {
|
||||
checkCallerIsSameApp(pkg);
|
||||
if (!checkPolicyAccess(pkg)) {
|
||||
Slog.w(TAG, "Notification policy access denied calling " + method);
|
||||
throw new SecurityException("Notification policy access denied");
|
||||
@@ -3131,6 +3132,10 @@ public class NotificationManagerService extends SystemService {
|
||||
if (isCallerSystem()) {
|
||||
return;
|
||||
}
|
||||
checkCallerIsSameApp(pkg);
|
||||
}
|
||||
|
||||
private static void checkCallerIsSameApp(String pkg) {
|
||||
final int uid = Binder.getCallingUid();
|
||||
try {
|
||||
ApplicationInfo ai = AppGlobals.getPackageManager().getApplicationInfo(
|
||||
|
||||
Reference in New Issue
Block a user