commit eefabd28c21e6ae02ca05e97bd22f9e23cbf98a5
author David Brazdil <dbrazdil@google.com> Thu Mar 22 16:27:18 2018 +0000
committer Nicolas Geoffray <ngeoffray@google.com> Mon Mar 26 08:05:33 2018 +0000
tree 58e4c2635e0d5682c3385bed639664ccfdd44f6a
parent e8a4e378c5a928d5de07bee6db99150a57dabcd8

Allow hidden API access from system libraries

Libraries like RemoteDisplay provide an APK that an app loads into
its process and which accesses internal APIs on the app's behalf,
without exposing the internals to the app. These libraries are
considered part of the platform, but were not exempt from hidden API
checks because they are not loaded with the boot strap class loader.

This patch adds a new flag to DexFile class which the constructor
sets to true of the canonical location of the newly loaded dex file
starts with "${ANDROID_ROOT}/framework/". Hidden API enforcement
then checks this flag when determining whether the caller of
a hidden class member is allowed to access it or not.

Bug: 64382372
Bug: 76138670
Bug: 76165623
Bug: 76112393
Test: art_dex_file_loader_test gtest
Test: art/test.py --gtest
Change-Id: If062bd668d7ba494bbb7b828e40932748d173b9a