summaryrefslogtreecommitdiff
path: root/libs/androidfw/AssetManager2.cpp
diff options
context:
space:
mode:
author Yurii Zubrytskyi <zyy@google.com> 2024-11-19 15:06:23 -0800
committer Yurii Zubrytskyi <zyy@google.com> 2025-02-18 13:58:08 -0800
commit38a1934fee7ef1fd0c3acd76e60c4deb6b29b4e3 (patch)
tree20ee25eee8d94b230c1ee8c5e9dea9a96eae4f9a /libs/androidfw/AssetManager2.cpp
parentefeea6290cca46e42330549e1e22b875243c1dcd (diff)
[pm] Always load rotated certificates for v4 signature
The optimized 'unsafe' function for loading v4 signature used to not look into the corresponding v2/3/3.1 block in the apk, and thus only returned the information from the v4 signature file. That information has no past certificates - and unfortunately we would use that in PackageManager as the main signing info for the package when removing a split as the only action of the installation session. It's also possible that some other place may start using the same function for loading the main package signing info, and lose the past signers there too. This change ensures that we always load those, making the 'unsafe' signature loading a bit slower, but much safer to use. Bug: 378539511 Flag: android.content.pm.always_load_past_certs_v4 Test: install a v4-signed app and remove a split Change-Id: I59e55eddd7f93a013aa5cc39c5e577a6e7e1bec9
Diffstat (limited to 'libs/androidfw/AssetManager2.cpp')
0 files changed, 0 insertions, 0 deletions