| commit | d31f8c590b383a15d07e4d8cabd09b5fd061a33c | [log] [tgz] |
|---|---|---|
| author | Grant Menke <grantmenke@google.com> | Thu Apr 25 10:43:43 2024 -0700 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Wed Jul 10 22:18:46 2024 +0000 |
| tree | 727115a4d06367365b7a316bf0c7f6ec8ecbdd1d | |
| parent | 2dfde8a5717c7c063986c31403db1099bb25d115 [diff] |
DO NOT MERGE Unbind CS if connection is not created within 15 seconds. This CL adds a check to ensure that connection creation occurs within 15 seconds after binding to that ConnectionService. If the connection/conference is not created in that timespan, this CL adds logic to manually unbind the ConnectionService at that point in time. This prevents malicious apps from keeping a declared permission in forever even in the background. Bug: 293458004 Test: manually using the provided apk + atest CallsManagerTest Flag: EXEMPT Security High/Critical Severity CVE (cherry picked from commit 7aa55ffca65d6166145fd9660e0f7340c07053bf) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:cd41ded936e3f5ce781fa9587ff602c9325d3d84) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:46ab5f5c7e9d3a61ba103f7c574b852bdffd9d92) Merged-In: I30caed1481dff5af2223a8ff589846597cee8229 Change-Id: I30caed1481dff5af2223a8ff589846597cee8229