commit 9007c0c54ec24e0185f1fb697f973af0f497db9a
author Jeff Sharkey <jsharkey@android.com> Thu Nov 03 11:26:11 2011 -0700
committer Geremy Condra <gcondra@google.com> Thu Nov 10 14:51:46 2011 -0800
tree 20b35b91178a9581d235f75342e9121597e4d910
parent 4db1f432b853152075923499768639e14403b73a

DO NOT MERGE Verify AppWidget ownership during update.

Bug: 5563081

services/java/com/android/server/AppWidgetService.java

diff --git a/services/java/com/android/server/AppWidgetService.java b/services/java/com/android/server/AppWidgetService.java
index 24526af..5b8665e 100644
--- a/services/java/com/android/server/AppWidgetService.java
+++ b/services/java/com/android/server/AppWidgetService.java
@@ -433,10 +433,13 @@
                 return;
             }
             ArrayList<AppWidgetId> instances = p.instances;
+            final int callingUid = getCallingUid();
             final int N = instances.size();
             for (int i=0; i<N; i++) {
                 AppWidgetId id = instances.get(i);
-                updateAppWidgetInstanceLocked(id, views);
+                if (canAccessAppWidgetId(id, callingUid)) {
+                    updateAppWidgetInstanceLocked(id, views);
+                }
             }
         }
     }