Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Call getPackageInfo() with cleared calling identity in ensureSystemPackageName().

Browse Source 
Otherwise non-primary users might get a SecurityException.

Bug: 145981139
Bug: 148763415
Test: manual
Change-Id: I5883e296a0d753e43075cbf0abc5dc4da91e2fca
This commit is contained in:
Hai Zhang
2020-02-04 10:11:12 -08:00
parent 25f9b23c6a
commit e693b797bc
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -21231,9 +21231,14 @@ public class PackageManagerService extends IPackageManager.Stub
if (packageName == null) { if (packageName == null) {
return null; return null;
} }
long token = Binder.clearCallingIdentity();
try {
if (getPackageInfo(packageName, MATCH_FACTORY_ONLY, UserHandle.USER_SYSTEM) == null) { if (getPackageInfo(packageName, MATCH_FACTORY_ONLY, UserHandle.USER_SYSTEM) == null) {
return null; return null;
} }
} finally {
Binder.restoreCallingIdentity(token);
}
return packageName; return packageName;
} }