commit ee2a3365eb28cf122d1e0fbe67efd214acb16b68
author Chen Xu <fionaxu@google.com> Fri Nov 05 23:52:37 2021 -0700
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> Sat Feb 05 01:17:54 2022 +0000
tree 4a581cde57f765e22aeb303fd9b3eaeb0f213dfa
parent 23e47d30b15787c88a56a511e53e17a3f8c43140

filter deviceIdentifiers for subscriptionInfo if callers without perm

Fix a security issue that app can read iccId of sim card(s) without
requiring READ_PRIVILEGED_PHONE_STATE permission when calling hidden
API SubscriptionManager.getAllActiveSubscriptionInfoList. Apply
deviceIdentifier filter to remove those info if the caller does
not have proper permissions. The previous fix forgot to reassign
returned value with filtered result.

Bug: 183612370
Test: Manual
Change-Id: I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb
(cherry picked from commit 14507754e932c335621bf61a065c94828af151d2)
Merged-In:I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb