summaryrefslogtreecommitdiff
path: root/libs/androidfw/StringPool.cpp
diff options
context:
space:
mode:
author Nan Wu <wnan@google.com> 2024-06-03 19:12:22 +0000
committer Nan Wu <wnan@google.com> 2024-06-06 13:18:23 +0000
commitd34ae40f870d4362a069940a035a4d58a536a231 (patch)
tree13147ab020a5c84bff049b50bf9c60693eea83e7 /libs/androidfw/StringPool.cpp
parentb2d5ed9554e7d3357bd1c1da98d00723d75a3bf6 (diff)
Allow an activity to start a new task via startNextMatchingActivity
A vulnerability bug fix (b/230492947) causes this no longer works. We cannot simply fix the issue by trying to avoid move the task to the front. The real reason is that startNextMatchingActivity uses launchedFromUid (the app the lauches the orignal activity) to as the callingUid and realCallingUid to launch the next matching activity - though setting callingUid is largely irrelevant because ActivityStarter sets it to caller app's uid if the caller is set; In this case, the caller is set to the app that calls the method. But for BAL purpose, this is not good because the launched from app might have privileges, such as the Launcher app. Change the realCallingUid to the activity that calls startNextMatchingActivity. Bug: 337726734 Test: Manual test. BackgroundActivityLaunchTest#testBackgroundActivityBlockedInStartNextMatchingActivity Flag: EXEMPT Bug Fix Change-Id: Ia8c6123e8e9325d17d2bfab9589b11eb087da97a
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions