commit 6d372148e7e907552cd9cc121afcf415c50f645a
author Alisher Alikhodjaev <alisher@google.com> Thu Jan 14 16:30:04 2021 -0800
committer Alisher Alikhodjaev <alisher@google.com> Thu Jan 14 16:30:04 2021 -0800
tree 3770b06f009a1f36ae7cec319a03880f0073060d
parent 0b189206b2d0c39be403cdf40b3cd1dde87259ac

The BlueTooth address of the peer can be leaked.

A malicious application without any permission can steal the Bluetooth
 address of the peer by listening to the broadcast with action
 ACTION_CANCEL_HANDOVER_TRANSFER

Bug: 168712890
Test: build ok
Change-Id: I59cad8ae66a8a0c34c5db9fd908de7efe5f9b97e

src/com/android/nfc/beam/BeamTransferManager.java

diff --git a/src/com/android/nfc/beam/BeamTransferManager.java b/src/com/android/nfc/beam/BeamTransferManager.java
index c8a48a1..d728864 100644
--- a/src/com/android/nfc/beam/BeamTransferManager.java
+++ b/src/com/android/nfc/beam/BeamTransferManager.java
@@ -494,6 +494,7 @@
 
     PendingIntent buildCancelIntent() {
         Intent intent = new Intent(BeamStatusReceiver.ACTION_CANCEL_HANDOVER_TRANSFER);
+        intent.setPackage("com.android.nfc");
         intent.putExtra(BeamStatusReceiver.EXTRA_ADDRESS, mRemoteDevice.getAddress());
         intent.putExtra(BeamStatusReceiver.EXTRA_INCOMING, mIncoming ?
                 BeamStatusReceiver.DIRECTION_INCOMING : BeamStatusReceiver.DIRECTION_OUTGOING);