OSDN Git Service

(root) / android-x86 / frameworks-base.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dce9289) | patch
[Security] Prevent malicious notifications from AMS.
authorCarlos Valdivia <carlosvaldivia@google.com>
Sun, 8 May 2016 04:46:15 +0000 (21:46 -0700)
committerCarlos Valdivia <carlosvaldivia@google.com>
Sun, 8 May 2016 04:46:15 +0000 (21:46 -0700)
commit06329e5fb214ce6c2179b7fc7740c0fba41f084a
tree94dfcf4983106c10ce8d50dcf3065d854878caedtree | snapshot
parentdce92891df42d5ad8cdcb6ecade5b2801a14f090commit | diff
[Security] Prevent malicious notifications from AMS.

There was a hole in the getAuthToken logic that allowed notifications
resulting from getAuthToken requests using notifyOnAuthFailure=true to
launch arbitrary activites on the device. This is because the
getAuthToken session overrode onResult (unlike addAccount, updateCreds,
or confirmCreds).

Bug: 13787929
Change-Id: Ife1d48835f48416c2f0690f1413a076b69215190
services/core/java/com/android/server/accounts/AccountManagerService.java diff | blob | history
frameworks/base
About OSDN
Find Software
Develop Software
Help