RESTRICT AUTOMERGE Fix security vulnerability in getManageSpaceActivityIntent

Use ActivityManagerInternal.getPendingIntentActivityAsApp instead of
mContext.createPackageContextAsUser to securely construct the
PendingIntent. This prevents callers from obtaining a PendingIntent
registered under the target package identity with system privileges.

Bug: 504573577
Test:
Flag: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:20f2dfd9404912b78036823cc56e392031e5846d
Merged-In: I107885fe1d3203c11868c2cabbb68ed164811bbd
Change-Id: I107885fe1d3203c11868c2cabbb68ed164811bbd
1 file changed