tag | dd95b36ea02d06ff3d64ce59dcffacd7d73f6250 | |
---|---|---|
tagger | The Android Open Source Project <initial-contribution@android.com> | Mon Nov 02 16:56:40 2020 -0800 |
object | a5b6f9a877447179f847f958dc0093469a6a27e2 |
Android security 10.0.0 release 48
commit | a5b6f9a877447179f847f958dc0093469a6a27e2 | [log] [tgz] |
---|---|---|
author | John Shao <johnshao@google.com> | Wed Jul 29 22:17:01 2020 +0000 |
committer | Anis Assi <anisassi@google.com> | Thu Aug 06 17:13:47 2020 -0700 |
tree | fa30e55279eb5e410a3511a0ff679f7670444aa9 | |
parent | c17fab0869efad67f27b3cd02efb68f9611dbd47 [diff] |
Correct vulnerability when setting pending intents on import/export notifications by setting FLAG_IMMUTABLE For cases where we were setting an empty content intent, setContentIntent has not been required since Gingerbread Bug: 161718556 Test: build Change-Id: I1f62fdc077401fea2c48a31527464464f08a6b64 (cherry picked from commit 1d595f80e9c5157f8ca0285b572c9f1463e05c58)