diff options
| author | 2024-09-17 10:00:39 -0700 | |
|---|---|---|
| committer | 2024-09-17 17:06:36 +0000 | |
| commit | ea329372d8426c6cdbc2d5570c10bef1003d9912 (patch) | |
| tree | debdf16f5ae0ac5657600a7e7f71a93b3cc2b177 /libs/hwui/FrameInfoVisualizer.cpp | |
| parent | 786a3a7d260f5ef7286c4cabab69e7f06e5cb659 (diff) | |
Validate originating process for transferTouchGesture API
Addresses a security vulnerability where a malicious process could
potentially steal an active touch gesture from its host or embedded
process. The fix ensures that the requested is the owner of the
InputTransferToken. This adds an additional verification on top of
the existing association checks between the transferFrom and
transferTo processes.
Flag: EXEMPT security fix
Bug: 364037868
Test: presubmit
Change-Id: I2654ccab807a62a341c8af69bf64bb33e56c4252
Diffstat (limited to 'libs/hwui/FrameInfoVisualizer.cpp')
0 files changed, 0 insertions, 0 deletions