| commit | b479180b73c07082394b96ec0f17d6fcdb67950a | [log] [tgz] |
|---|---|---|
| author | Iván Budnik <ivanbuper@google.com> | Tue Jul 19 13:22:09 2022 +0000 |
| committer | Iván Budnik <ivanbuper@google.com> | Tue Aug 09 16:39:43 2022 +0000 |
| tree | e29e05f6032edc3e36837451af8e9966011a44d0 | |
| parent | 7c5b922af83e73dde27741dd472ca6e195e01a46 [diff] |
Enforce ComponentName belongs to caller app Add checks that enforce ComponentName's package belongs to calling app in MediaButtonReceiverHolder and MediaSessionRecord. This avoids privileged execution of arbitrary code. Bug: 238177121 Test: atest CtsMediaBetterTogetherTestCases Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897 Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897