0d2ee8e16afc - platform/frameworks/base

commit: 0d2ee8e16afcb7b2e9adc71df57aa7665040eb65
[log]
author: Darshil Shah <darshilshah@google.com>
Fri May 29 10:33:07 2026 +0000
committer: Android Build Coastguard Worker <android-build-coastguard-worker@google.com>
Thu Jul 09 15:45:59 2026 -0700
tree: 850699ff9bbc08d4b415a17df7bf8c169ff0d242
parent: 9183bfe6574b24fd7876a14b89fc9cad0d1d15f9 [diff]

Validate caller UID in openProxyFileDescriptor

Ensure that the calling UID matches the owner UID of the AppFuse mount
before opening the file descriptor to prevent unauthorized cross-app access.

Bug: 491748298
Test: EXEMPT tested manually
Flag: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:7231c8493ec30c2fab8d9e6de0fd842ffb5a37c8
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:5d69a8d40a30316048a2f65687c0f1b830043f2d
Merged-In: I83e8105de792c1a805cf029e7cbf57a611786995
Change-Id: I83e8105de792c1a805cf029e7cbf57a611786995

services/core/java/com/android/server/StorageManagerService.java[diff]
services/core/java/com/android/server/storage/AppFuseBridge.java[diff]

2 files changed