0c4e6a8 - platform/frameworks/base

commit	0c4e6a8da3405f742e5cef8afdf579d58b6f1246	[log] [tgz]
author	Dianne Hackborn <hackbod@google.com>	Fri May 13 17:37:08 2016 -0700
committer	Dianne Hackborn <hackbod@google.com>	Fri May 13 17:37:08 2016 -0700
tree	86e49d3786d9b9487fb0d61f26c7f4429572f7b2
parent	3f84c5cb34cf15ad7c324ff9063f3f5850682791 [diff]

Fix issue #27532364: Security Vulnerability in IIntentSender.send

We need to make IIntentSender oneway...  but when the system is
calling that for itself, it needs to be able to return a result code.

Solution: instead of directly calling the interface, we have a new
IPC through the activity manager.  If the thing being used is the
activity manager impl, it can do the synchronous send and return
the result directly in place.  If not, you only get asynchronous
sending and thus never a failure result back (too bad for you!).

Change-Id: I4096e5b00063e8dba66230585a2dfe67e35e8092

cmds/pm/src/com/android/commands/pm/Pm.java[diff]
core/java/android/app/ActivityManagerNative.java[diff]
core/java/android/app/IActivityManager.java[diff]
core/java/android/app/PendingIntent.java[diff]
core/java/android/content/IIntentSender.aidl[diff]
core/java/android/content/IntentSender.java[diff]
services/core/java/com/android/server/am/ActivityManagerService.java[diff]
services/core/java/com/android/server/am/PendingIntentRecord.java[diff]
services/core/java/com/android/server/pm/PackageManagerShellCommand.java[diff]

9 files changed

tree: 86e49d3786d9b9487fb0d61f26c7f4429572f7b2