tree 4e6308574bc7a3ecf8a830d5ad258533043a0268
parent 80e4a258578df50bfa5e02520afadb460a414dee
author SongFerngWang <songferngwang@google.com> 1620221439 +0800
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1625137238 +0000

[security] SubscriptionGroup is exposed to unprivileged callers

SubscriptionInfo.mGroupUUID is not cleared in
conditionallyRemoveIdentifiers if the caller only has READ_PHONE_STATE
(based on a check to checkReadPhoneState) and not READ_DEVICE_IDENTIFIERS.
Bug: 181053462
Test: atest SubscriptionManagerTest

Change-Id: I68d1edb4e7cc2ad6696363ea1dacb09e839a651e
Merged-In: I68d1edb4e7cc2ad6696363ea1dacb09e839a651e
(cherry picked from commit f93d57ebb057af5bdb493dfe34519bf97869b023)