Google GitGoogle Git
Sign in
android/platform/frameworks/base/03988cf95e56
commit
03988cf95e56a9b472933cf4416c288faff2ebe7
[log]
author
Darshil Shah <darshilshah@google.com>
Fri May 29 10:33:07 2026 +0000
committer
Android Build Coastguard Worker <android-build-coastguard-worker@google.com>
Fri Jul 10 00:55:15 2026 -0700
tree
fd41e36f9ea4d637dd015a41c275f88913f06923
parent
5a73367d5b3a65f760cfcf639d425957d9e143fa [diff]
Validate caller UID in openProxyFileDescriptor

Ensure that the calling UID matches the owner UID of the AppFuse mount
before opening the file descriptor to prevent unauthorized cross-app access.

Bug: 491748298
Test: EXEMPT tested manually
Flag: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:7231c8493ec30c2fab8d9e6de0fd842ffb5a37c8
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:949dd5dad507def8bfe26b50bdba8eddfc487501
Merged-In: I83e8105de792c1a805cf029e7cbf57a611786995
Change-Id: I83e8105de792c1a805cf029e7cbf57a611786995
2 files changed
tree: fd41e36f9ea4d637dd015a41c275f88913f06923
  1. .prebuilt_info/
  2. android-sdk-flags/
  3. apct-tests/
  4. apex/
  5. api/
  6. bluetooth/
  7. boot/
  8. cmds/
  9. config/
  10. core/
  11. data/
  12. docs/
  13. drm/
  14. errorprone/
  15. graphics/
  16. identity/
  17. keystore/
  18. libs/
  19. location/
  20. media/
  21. mime/
  22. mms/
  23. native/
  24. nfc-extras/
  25. nfc-non-updatable/
  26. obex/
  27. omapi/
  28. opengl/
  29. packages/
  30. proto/
  31. ravenwood/
  32. ravenwood-framework-test-mapping/
  33. rs/
  34. samples/
  35. sax/
  36. services/
  37. startop/
  38. telecomm/
  39. telephony/
  40. test-base/
  41. test-junit/
  42. test-legacy/
  43. test-mock/
  44. test-runner/
  45. tests/
  46. tools/
  47. vendor/
  48. wifi/
  49. .clang-format
  50. .gitignore
  51. .mailmap
  52. AconfigFlags.bp
  53. ACTIVITY_MANAGER_OWNERS
  54. ACTIVITY_SECURITY_OWNERS
  55. ADB_OWNERS
  56. ADPF_OWNERS
  57. Android.bp
  58. BAL_OWNERS
  59. BATTERY_STATS_OWNERS
  60. BROADCASTS_OWNERS
  61. checkstyle.xml
  62. checkstyle_suppressions.xml
  63. CleanSpec.mk
  64. CONTENT_RESTRICTION_OWNERS
  65. CONTENT_SAFETY_OWNERS
  66. FF_LEADS_OWNERS
  67. framework-jarjar-rules.txt
  68. framework-minus-internal-res-jarjar-rules.txt
  69. GAME_MANAGER_OWNERS
  70. HAPTICS_OWNERS
  71. INPUT_OWNERS
  72. INTENT_OWNERS
  73. libcore-readonly.aconfig
  74. lint-baseline.xml
  75. LSE_APP_COMPAT_OWNERS
  76. MEMORY_OWNERS
  77. MESSAGE_QUEUE_OWNERS
  78. METADATA
  79. MODULE_LICENSE_APACHE2
  80. MULTIUSER_DESKTOP_OWNERS
  81. MULTIUSER_OWNERS
  82. NOTICE
  83. OEM_LOCK_OWNERS
  84. OOM_ADJUSTER_OWNERS
  85. OWNERS
  86. OWNERS.md
  87. PACKAGE_MANAGER_OWNERS
  88. pathmap.mk
  89. PERFETTO_OWNERS
  90. PERFORMANCE_OWNERS
  91. PREUPLOAD.cfg
  92. PREUPLOAD_OWNERS
  93. ProtoLibraries.bp
  94. Ravenwood.bp
  95. RESOURCE_OWNERS
  96. SDK_OWNERS
  97. SECURITY_STATE_OWNERS
  98. SQLITE_OWNERS
  99. TEST_MAPPING
  100. TestProtoLibraries.bp
  101. THERMAL_OWNERS
  102. TRACE_OWNERS
  103. TRADE_IN_MODE_OWNERS
  104. WEAR_OWNERS
  105. ZYGOTE_OWNERS