OSDN Git Service

(root) / android-x86 / frameworks-base.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 35b8453) | patch
DO NOT MERGE. Check provider access for content changes.
authorJeff Sharkey <jsharkey@android.com>
Fri, 18 Nov 2016 22:31:22 +0000 (15:31 -0700)
committerJeff Sharkey <jsharkey@android.com>
Fri, 18 Nov 2016 22:37:57 +0000 (15:37 -0700)
commit91add43ae7d31d9f2ccd9a2e7a692289ea4d258f
tree7a65012a5eae074a8f3fa956d2d2a91e94f479c1tree | snapshot
parent35b84533386421422f6459839dee6b4092af18d7commit | diff
DO NOT MERGE. Check provider access for content changes.

For an app to either send or receive content change notifications,
require that they have some level of access to the underlying
provider.

Without these checks, a malicious app could sniff sensitive user data
from the notifications of otherwise private providers.

Test: builds, boots, PoC app now fails
Bug: 32555637
Change-Id: If2dcd45cb0a9f1fb3b93e39fc7b8ae9c34c2fdef
core/java/android/app/ActivityManagerInternal.java diff | blob | history
services/core/java/com/android/server/am/ActivityManagerService.java diff | blob | history
services/core/java/com/android/server/content/ContentService.java diff | blob | history
frameworks/base
About OSDN
Find Software
Develop Software
Help