summaryrefslogtreecommitdiff
path: root/libs/androidfw/StringPool.cpp
diff options
context:
space:
mode:
author Jeff Chang <chengjeff@google.com> 2021-12-13 17:50:50 +0800
committer Jeff Chang <chengjeff@google.com> 2021-12-13 17:52:18 +0800
commit58a3327f22da7215cc3964f51a9ae6b490ae990e (patch)
tree40f71b46f1481a4be4ae02417bdbe470d2cd6b33 /libs/androidfw/StringPool.cpp
parent97ada9bc8407b7fd5f8b6f7b80640e301575be70 (diff)
Only allow system and same app to apply relinquishTaskIdentity
Any malicious application could hijack tasks by android:relinquishTaskIdentity. This vulnerability can perform UI spoofing or spy on user’s activities. This CL limit the usage which only allow system and same app to apply relinquishTaskIdentity. Bug: 185810717 Test: atest IntentTests atest testActivityWithRelinquishTaskIdentity atest com.android.server.wm.TaskTests Change-Id: I55fe8938cd9a0dd7c0268e1cfec89d4e95eee049
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions