b79f404eab1ddbf19a5788bbee1b47b0834255dc - LeafOS-Project/android_frameworks_base

commit	b79f404eab1ddbf19a5788bbee1b47b0834255dc	[log] [tgz]
author	Tetiana Meronyk <tetianameronyk@google.com>	Wed Jan 10 16:25:13 2024 +0000
committer	Android Build Coastguard Worker <android-build-coastguard-worker@google.com>	Wed Feb 21 19:13:21 2024 +0000
tree	58f9c18a59b8c526c2c6e70784d9e1dab737fd54
parent	439b828e84d5d91c47d55ac0ea42c246b4703af5 [diff]

Fix security vulnerability that creates user with no restrictions when accountOptions are too long.

Bug: 293602970
Test: atest UserManagerTest#testAddUserAccountData_validStringValuesAreSaved_validBundleIsSaved && atest UserManagerTest#testAddUserAccountData_invalidStringValuesAreTruncated_invalidBundleIsDropped
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:7e91582908475af43ff188d9d7e97aea2cdf8ee2)
Merged-In: I23c971f671546ac085060add89485cfac6691ca3
Change-Id: I23c971f671546ac085060add89485cfac6691ca3

core/java/android/os/PersistableBundle.java[diff]
core/java/android/os/UserManager.java[diff]
core/java/com/android/internal/app/ConfirmUserCreationActivity.java[diff]
services/core/java/com/android/server/pm/UserManagerService.java[diff]
services/tests/mockingservicestests/src/com/android/server/pm/UserManagerServiceTest.java[diff]
services/tests/servicestests/src/com/android/server/pm/UserManagerTest.java[diff]

6 files changed

tree: 58f9c18a59b8c526c2c6e70784d9e1dab737fd54