tree 051bcde48755309f984fdd67a1f74f3d59947eff
parent 3913d774d5c07922be03033981a475019a9704ce
author Hall Liu <hallliu@google.com> 1597975617 -0700
committer Hall Liu <hallliu@google.com> 1598316936 +0000

RESTRICT AUTOMERGE Fix exported broadcast receiver vulnerability

CellBroadcastReceiver was declared as exported in the manifest and
therefore allowed any app to send a MARK_AS_READ intent, even though
it's only supposed to be called from an internal PendingIntent. Fix this
by creating a new non-exported receiver and using that to handle the
mark-as-read intent instead.

Fixes: 162741784
Test: atest GoogleCellBroadcastReceiverUnitTests
Change-Id: I03c8163c22a6fbc92613ca2ccd2ac191fc0084a4
(cherry picked from commit e514bc6a01fdd36a519fd4fefffa45f166911c97)