diff options
| author | 2024-04-23 21:17:44 +0000 | |
|---|---|---|
| committer | 2024-04-23 21:43:03 +0000 | |
| commit | 0ead58f69f5de82b00406316b333366d556239f1 (patch) | |
| tree | c1af7b519dd407bdcbe33243d6872a87517e34ed /libs/androidfw/StringPool.cpp | |
| parent | 7ce227ebc43b5e6784137e4afb2b03008e6402e6 (diff) | |
Fix security vulnerability of non-dynamic permission removal
The original removePermission() code in PermissionManagerServiceImpl
missed a logical negation operator when handling non-dynamic
permissions, causing both
testPermissionPermission_nonDynamicPermission_permissionUnchanged and
testRemovePermission_dynamicPermission_permissionRemoved tests in
DynamicPermissionsTest to fail.
The corresponding test DynamicPermissionsTest is also updated in the
other CL: ag/27073864
Bug: 321711213
Test: DynamicPermissionsTest on sc-dev and tm-dev locally
Change-Id: Ia146d4098643d9c473f8c83d33a8a125a53101fc
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions