| commit | a4a8fca641b0671a8c1d2bb3857dc5fc40d01704 | [log] [tgz] |
|---|---|---|
| author | Vishnu Nair <vishnun@google.com> | Tue Sep 17 10:00:39 2024 -0700 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Wed Dec 11 17:43:47 2024 -0800 |
| tree | 8b41c74e4fbb4f5f8a07869f49c45a0ba437ef3f | |
| parent | 7946586c33503bc383403faec48ffcea39e365ac [diff] |
Validate originating process for transferTouchGesture API Addresses a security vulnerability where a malicious process could potentially steal an active touch gesture from its host or embedded process. The fix ensures that the requested is the owner of the InputTransferToken. This adds an additional verification on top of the existing association checks between the transferFrom and transferTo processes. Flag: EXEMPT security fix Bug: 364037868 Test: presubmit (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4089c359361d8703bab3be0ab0a29723db76b356) Merged-In: I2654ccab807a62a341c8af69bf64bb33e56c4252 Change-Id: I2654ccab807a62a341c8af69bf64bb33e56c4252