OSDN Git Service

Make sure that external callers cannot pass in the confirm bypass extra
authorAmith Yamasani <yamasani@google.com>
Wed, 25 Sep 2013 21:05:33 +0000 (14:05 -0700)
committerAmith Yamasani <yamasani@google.com>
Thu, 26 Sep 2013 00:11:34 +0000 (17:11 -0700)
commit77aa51e5b7261638590af1d69ac03f4c8cd25692
tree5bb8e4d5c7fc6a11667f87b5975f60cbdee5ef24
parentefd88e2c468db2169ff9bb17f2b89c246756dcda
Make sure that external callers cannot pass in the confirm bypass extra

Security fix for vulnerability where an app could launch into the screen lock
change dialog without first confirming the existing password/pattern.

Also, make sure that the fragments are launched with the correct corresponding
activity.

Bug: 9858403
Change-Id: I0f2c00a44abeb624c6fba0497bf6036a6f1a4564
AndroidManifest.xml
src/com/android/settings/ChooseLockGeneric.java
src/com/android/settings/ChooseLockPassword.java
src/com/android/settings/ChooseLockPattern.java