summaryrefslogtreecommitdiff
path: root/libs/androidfw/StringPool.cpp
diff options
context:
space:
mode:
author Iván Budnik <ivanbuper@google.com> 2022-07-19 13:22:09 +0000
committer Iván Budnik <ivanbuper@google.com> 2022-08-09 16:39:43 +0000
commitb479180b73c07082394b96ec0f17d6fcdb67950a (patch)
treee29e05f6032edc3e36837451af8e9966011a44d0 /libs/androidfw/StringPool.cpp
parent7c5b922af83e73dde27741dd472ca6e195e01a46 (diff)
Enforce ComponentName belongs to caller app
Add checks that enforce ComponentName's package belongs to calling app in MediaButtonReceiverHolder and MediaSessionRecord. This avoids privileged execution of arbitrary code. Bug: 238177121 Test: atest CtsMediaBetterTogetherTestCases Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897 Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions