diff options
| author | 2023-05-05 18:41:29 +0800 | |
|---|---|---|
| committer | 2023-05-09 10:57:06 +0800 | |
| commit | f8489cf667a0e5831b84c033e1fcd6a18337d4ed (patch) | |
| tree | 4c7444054debd1cdc2c8febd17e61f9c756fcf41 /libs/input/PointerController.cpp | |
| parent | 6b44c7bb9a5cd57120b34538c90e3e49084128c6 (diff) | |
Validate checkInstallConstraints() installer package name
installerPackageName is set when creating PackageInstaller instance.
The value is get by context.getPackageName(). But it is possible the
application can modify the value by reflection to bypass the security
check to access the API. This change will verify it and throws the
SecurityException if the name doesn't match.
The change here doesn't update the javadoc part, it will be added in
the follow up changes.
Bug: 280721965
Test: atest InstallConstraintsTest
Test: manual. Set fake installerPackageName will throw exception
Change-Id: I168e695cf12971f3d770de0f3c9189222bb1707c
Diffstat (limited to 'libs/input/PointerController.cpp')
0 files changed, 0 insertions, 0 deletions