OSDN Git Service

Fix phishing attack in ChooseLockGeneric
authorSteven Ng <stevenckng@google.com>
Mon, 15 May 2017 17:30:04 +0000 (18:30 +0100)
committerkuantung <kuantung@google.com>
Thu, 25 May 2017 23:08:01 +0000 (16:08 -0700)
commit6b20d59132cf7a7ff8697dbdd261dc0fe0858608
treef62c3e7d1db4260064947eed2e52553b3aa8a1f4
parentdc744b8d086429514b1f70078e1d12ee33b2c3ce
Fix phishing attack in ChooseLockGeneric

Cherry-pick of 436256c36d69549c77320d073bef27649c1b1d6e

Test: 1) make and run SettingsTests. It passes.
      2) Manual test 1
         a) On a device supports fingerprint, set a password but not fingerprint.
         b) adb shell am start -a android.app.action.SET_NEW_PARENT_PROFILE_PASSWORD
         c) Confirm Lock password screen is shown
         d) Select "Skip fingerprint". There isn't a second lock password confirmation screen.
         e) A new password can be set successfully.
      3) Manual test 2
         a) Repeat step 2)a) - 2)c)
         b) Select "Fingerprint + PIN". There isn't a second lock password confirmation screen.
         c) A new password and fingerprint can be enrolled successfully.

Bug: 33059280
Change-Id: I1078c6e303fc41aeeb370e5d6518d1f16b5837f1
Merged-In: I1078c6e303fc41aeeb370e5d6518d1f16b5837f1
(cherry picked from commit 14153fd25b4757add2107d35e71fcfbb55c1e419)
(cherry picked from commit 581bd1c20d136f37a7803bdf4107baa2e793d85e)
src/com/android/settings/ChooseLockGeneric.java
tests/app/Android.mk
tests/app/src/com/android/settings/ChooseLockGenericTest.java [new file with mode: 0644]