OSDN Git Service

Do not make ActivityContainer available to apps. DO NOT MERGE
authorCraig Mautner <cmautner@google.com>
Tue, 17 Feb 2015 18:17:21 +0000 (10:17 -0800)
committerThe Android Automerger <android-build@google.com>
Wed, 18 Feb 2015 00:32:01 +0000 (16:32 -0800)
commit36ebab675cba49e5201c5c228a524e6e1bb7dcea
tree18366528ff6128899959b0cb8585224aebd6856d
parentb464571193fc7a2335a7f91f1c79a292c23b2f13
Do not make ActivityContainer available to apps. DO NOT MERGE

A security leak was discovered whereby a malicious app could get the
IActivityContainer object from one app and use it to inject events
into another app. This fix removes the availability of the
IActivityContainer and replaces its one use with a method for
returning the information the IActivityContainer was used for.

Fixes bug 19394591.

Change-Id: Ib3cec25b25130cd8e098892c057742cfd575cfdd
core/java/android/app/ActivityManagerNative.java
core/java/android/app/ActivityThread.java
core/java/android/app/IActivityManager.java
services/core/java/com/android/server/am/ActivityManagerService.java