Merge "Only allow ROOT'ed ADB to run unit tests ignoring certificates." into tm-dev am: 4be480315a

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16987854

Change-Id: I7d9d4b5c9e8975e752d9748bdf2de6035f9349d0
This commit is contained in:
Makoto Onuki
2022-02-24 21:29:56 +00:00
committed by Automerger Merge Worker

View File

@@ -14330,7 +14330,8 @@ public class ActivityManagerService extends IActivityManager.Stub
int match = mContext.getPackageManager().checkSignatures(
ii.targetPackage, ii.packageName);
if (match < 0 && match != PackageManager.SIGNATURE_FIRST_NOT_SIGNED) {
if (Build.IS_DEBUGGABLE && (flags & INSTR_FLAG_ALWAYS_CHECK_SIGNATURE) == 0) {
if (Build.IS_DEBUGGABLE && (callingUid == Process.ROOT_UID)
&& (flags & INSTR_FLAG_ALWAYS_CHECK_SIGNATURE) == 0) {
Slog.w(TAG, "Instrumentation test " + ii.packageName
+ " doesn't have a signature matching the target " + ii.targetPackage
+ ", which would not be allowed on the production Android builds");