bca099fcb293 - platform/frameworks/base

commit: bca099fcb293c247ce616228bb9b0eb8b1c17723
[log]
author: Darshil Shah <darshilshah@google.com>
Fri May 29 10:33:07 2026 +0000
committer: Android Build Coastguard Worker <android-build-coastguard-worker@google.com>
Fri Jul 10 08:08:25 2026 -0700
tree: 097177cf1817f8de20534276fa10ff71d4d4d468
parent: e93df405837f8bc9e7b056dcbbbeaa118ea1f210 [diff]

Validate caller UID in openProxyFileDescriptor

Ensure that the calling UID matches the owner UID of the AppFuse mount
before opening the file descriptor to prevent unauthorized cross-app access.

Bug: 491748298
Test: EXEMPT tested manually
Flag: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:7231c8493ec30c2fab8d9e6de0fd842ffb5a37c8
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:6f99a1866c92b532bf7ddb3b2970f4ce88b40964
Merged-In: I83e8105de792c1a805cf029e7cbf57a611786995
Change-Id: I83e8105de792c1a805cf029e7cbf57a611786995

2 files changed

tree: 097177cf1817f8de20534276fa10ff71d4d4d468