tree 6b6854ced637bffd6bb93658a98de78d6d3724d6
parent 1e1f3eb29e97c00b03a09197eea9469fd4cb3239
author Shuo Qian <shuoq@google.com> 1596244666 -0700
committer android-build-team Robot <android-build-team-robot@google.com> 1597268666 +0000

Add package checking with Uid in EuiccController#getEid

EuiccController does not validate the calling package name
(i.e. to ensure that it is owned by the calling UID). It is
therefore possible for an app to effectively gain carrier
 privileges in the call to EuiccController#getEid by
passing the package name of another app that does has carrier
 privileges to one or more subscriptions.

Test: safe net log
Bug: 159062405
Change-Id: I0bf7c8b267a0c9cd877328c4ff3169950e1ff64f
(cherry picked from commit 1221ede9d8cdea7586ae98357726df3d80e0e448)