diff options
| author | 2022-07-19 13:22:09 +0000 | |
|---|---|---|
| committer | 2022-08-09 16:46:08 +0000 | |
| commit | ff7be9912fae5a04c2703a113160782dad9509a8 (patch) | |
| tree | e81862d251ff52c5b9085ea088b4a971909b50cb /libs/androidfw/StringPool.cpp | |
| parent | d011967068c10a42a0d24524472bce39bce5b1cf (diff) | |
Enforce ComponentName belongs to caller app
Add checks that enforce ComponentName's package belongs to calling app
in MediaButtonReceiverHolder and MediaSessionRecord. This avoids
privileged execution of arbitrary code.
Bug: 238177121
Test: atest CtsMediaBetterTogetherTestCases
Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897
Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions