commit 1951d27669b1e8eab96f4082cb00cb1d030602ec
author Chris Manton <cmanton@google.com> Tue Nov 10 16:45:44 2020 -0800
committer Jakub Pawlowski <jpawlowski@google.com> Thu Nov 19 10:20:24 2020 +0000
tree f2be76179a3962ea1a0efa04e2435354c7d2900b
parent e615d96b9bbd2a4abcab5a404772eef69b38e153

Add bluetooth package to permission request intent

Limit the component that may resolve this intent to the
bluetooth package.

Bug: 158219161
Test: Security Fix
Tag: #security
Change-Id: If732f940a7aa256f5975349118e8eb6cf5584676

src/com/android/settings/bluetooth/BluetoothPermissionRequest.java

diff --git a/src/com/android/settings/bluetooth/BluetoothPermissionRequest.java b/src/com/android/settings/bluetooth/BluetoothPermissionRequest.java
index 85c5e45..ce6f078 100644
--- a/src/com/android/settings/bluetooth/BluetoothPermissionRequest.java
+++ b/src/com/android/settings/bluetooth/BluetoothPermissionRequest.java
@@ -131,6 +131,7 @@
                 // "Clear All Notifications" button
 
                 Intent deleteIntent = new Intent(BluetoothDevice.ACTION_CONNECTION_ACCESS_REPLY);
+                deleteIntent.setPackage("com.android.bluetooth");
                 deleteIntent.putExtra(BluetoothDevice.EXTRA_DEVICE, mDevice);
                 deleteIntent.putExtra(BluetoothDevice.EXTRA_CONNECTION_ACCESS_RESULT,
                         BluetoothDevice.CONNECTION_ACCESS_NO);