Add uid/package check in WifiServiceImpl#registerSuggestionConnectionStatusListener
Enforce UID to package name check to validate that the caller isn't
providing a fake packageName which isn't their own.
Bug: 197536547
Test: atest com.android.server.wifi
Change-Id: I20c73b98b308b29297533bbb2a23de1b4001a4bb
(cherry picked from commit 29e8d7be3b3646b77ee210b385b4d27fd1dc4d7f)
diff --git a/service/java/com/android/server/wifi/WifiServiceImpl.java b/service/java/com/android/server/wifi/WifiServiceImpl.java
index d433787..f30b850 100644
--- a/service/java/com/android/server/wifi/WifiServiceImpl.java
+++ b/service/java/com/android/server/wifi/WifiServiceImpl.java
@@ -5068,6 +5068,7 @@
throw new IllegalArgumentException("listener must not be null");
}
final int uid = Binder.getCallingUid();
+ mWifiPermissionsUtil.checkPackage(uid, packageName);
enforceAccessPermission();
enforceLocationPermission(packageName, featureId, uid);
if (isVerboseLoggingEnabled()) {
