diff options
| author | 2024-04-23 21:53:02 +0000 | |
|---|---|---|
| committer | 2024-04-23 21:54:22 +0000 | |
| commit | 35d77a77feef62dc108f6478cb9228cc6044f70d (patch) | |
| tree | 6f04c8ff7afe2db699298580b8f763c666b2d11b /libs/androidfw/StringPool.cpp | |
| parent | 5e2bd50f92d42658b0a269febcba24ed779cb91f (diff) | |
Fix security vulnerability of non-dynamic permission removal
The original removePermission() code in PermissionManagerService
missed a logical negation operator when handling non-dynamic
permissions, causing both
testPermissionPermission_nonDynamicPermission_permissionUnchanged and
testRemovePermission_dynamicPermission_permissionRemoved tests in
DynamicPermissionsTest to fail.
The corresponding test DynamicPermissionsTest is also updated in the
other CL: ag/27073864
Bug: 321711213
Test: DynamicPermissionsTest on sc-dev and tm-dev locally
Change-Id: Id573b75cdcfce3a1df5731ffb00c4228c513e686
Merged-In: Ia146d4098643d9c473f8c83d33a8a125a53101fc
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions