From f26e1728d90c8ba217c383ff573aa4bf485ac04c Mon Sep 17 00:00:00 2001
From: Mark Renouf <mrenouf@google.com>
Date: Wed, 8 Mar 2023 15:30:05 +0000
Subject: Fix permission check for unbundled sharesheet

Only the calling appId should be compared, not the full uid.

Fix: 269106787
Change-Id: I29cd9644a872d1db3eedb6db1fdc3fa6f4dc072b
---
 services/core/java/com/android/server/pm/ShortcutService.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/core/java/com/android/server/pm/ShortcutService.java b/services/core/java/com/android/server/pm/ShortcutService.java
index 7fc46fd6f757..a2b2983a8f35 100644
--- a/services/core/java/com/android/server/pm/ShortcutService.java
+++ b/services/core/java/com/android/server/pm/ShortcutService.java
@@ -1641,7 +1641,7 @@ public class ShortcutService extends IShortcutService.Stub {
             return false;
         }
         int uid = injectGetPackageUid(systemChooser.getPackageName(), UserHandle.USER_SYSTEM);
-        return uid == callingUid;
+        return UserHandle.getAppId(uid) == UserHandle.getAppId(callingUid);
     }
 
     private void enforceSystemOrShell() {
-- 
cgit v1.2.3-59-g8ed1b