Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Call getPackageInfo() with cleared calling identity in ensureSystemPackageName().

Browse Source 
Otherwise non-primary users might get a SecurityException.

Bug: 145981139
Bug: 148763415
Test: manual
Change-Id: I5883e296a0d753e43075cbf0abc5dc4da91e2fca
(cherry picked from commit e693b797bc)
This commit is contained in:
Hai Zhang
2020-02-04 10:11:12 -08:00
committed by android-build-team Robot
parent 8d0ae5c65c
commit f98e1086f5
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
services/core/java/com/android/server/pm/PackageManagerService.java
View File

@@ -21228,8 +21228,13 @@ public class PackageManagerService extends IPackageManager.Stub
if (packageName == null) {
return null;
}
if (getPackageInfo(packageName, MATCH_FACTORY_ONLY, UserHandle.USER_SYSTEM) == null) {
return null;
long token = Binder.clearCallingIdentity();
try {
if (getPackageInfo(packageName, MATCH_FACTORY_ONLY, UserHandle.USER_SYSTEM) == null) {
return null;
}
} finally {
Binder.restoreCallingIdentity(token);
}
return packageName;
}