| commit | 7319e40b37aba598e081b56095b7ed4e0a04396c | [log] [tgz] |
|---|---|---|
| author | Iván Budnik <ivanbuper@google.com> | Tue Jul 19 13:22:09 2022 +0000 |
| committer | Iván Budnik <ivanbuper@google.com> | Thu Aug 18 10:50:06 2022 +0000 |
| tree | 4cdf63df1066a79bfe6941c3e34267a43773c7f0 | |
| parent | 33e3f60e06fbeeba49854539ef7fb00900b9ec65 [diff] |
Enforce ComponentName belongs to caller app Add checks that enforce ComponentName's package belongs to calling app in MediaButtonReceiverHolder and MediaSessionRecord. This avoids privileged execution of arbitrary code. Bug: 238177121 Test: atest CtsMediaBetterTogetherTestCases Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897 (cherry picked from commit f5b75876def5bc973df4590ebd4ea67591afc2be) Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897