commit d9455b98b1d35ca2a3512c21792202c1e011f73b
author xshu <xshu@google.com> Tue Jul 20 18:22:44 2021 -0700
committer Oscar Shu <xshu@google.com> Wed Jul 21 19:48:19 2021 +0000
tree 9a0975b40d7df532b54ca8f012b4ca8580cf092a
parent 2f6a113f1762b812809b82a447fd56e8f0293a4b

AddOrUpdateNetworkPrivileged verify packageName belongs to uid

Make sure the packageName actually belongs to the calling uid before
performing further permission checks.

Bug: 191051260
Test: atest com.android.server.wifi
Change-Id: Id2b89184ed808f27a356e3598652de8405757964
Merged-in: Id2b89184ed808f27a356e3598652de8405757964
(cherry picked from commit ba3833961e51dc4273f4cf0a20d1eb946ffcc295)

service/java/com/android/server/wifi/WifiServiceImpl.java

diff --git a/service/java/com/android/server/wifi/WifiServiceImpl.java b/service/java/com/android/server/wifi/WifiServiceImpl.java
index 2a9cc25..c69d8ea 100644
--- a/service/java/com/android/server/wifi/WifiServiceImpl.java
+++ b/service/java/com/android/server/wifi/WifiServiceImpl.java
@@ -2687,6 +2687,7 @@
             WifiConfiguration config, String packageName) {
         int pid = Binder.getCallingPid();
         int uid = Binder.getCallingUid();
+        mWifiPermissionsUtil.checkPackage(uid, packageName);
         boolean hasPermission = isPrivileged(pid, uid)
                 || isDeviceOrProfileOwner(uid, packageName)
                 || mWifiPermissionsUtil.isSystem(packageName, uid);