tag ca84cf4b0a0e7d8eac48b7bef97a23df3193deaf
tagger The Android Open Source Project <initial-contribution@android.com> Mon Dec 05 16:49:46 2022 -0800
object e1ec3b167754930d4d87b48414f9d707554a02f0

Android Security 10.0.0 Release 73 (9269285)

commit e1ec3b167754930d4d87b48414f9d707554a02f0
author Luke Huang <huangluke@google.com> Tue Jul 07 23:11:05 2020 +0800
committer Anis Assi <anisassi@google.com> Thu Oct 08 17:09:30 2020 -0700
tree b9f56396c3f5613ccbb53d4b68e4f5e5812bdeab
parent a6aa18923ed8d11ae592ed1a9cda44d049d84426

Backport: Fix the side channel attack by using async DnsResolver API with FLAG_NO_CACHE_STORE

Before this CL, FLAG_NO_CACHE_STORE could be used to perform side
channel attack. Because this flag ensures the result is never
added to the cache, but will return a cached response if one exists.
So make FLAG_NO_CACHE_STORE imply FLAG_NO_CACHE_LOOKUP to block the
possibility of side channel attacking.

Bug: 150371903
Test: atest
Because DnsResolver had been moved to another git project in R,
use aosp/1302595 as Merged-In tag to avoid conflict.
Merged-In: I1ff2dc09f41f76973c5f066b07b15388e722b375

Change-Id: Ic0ef9b22bb5992b083bebc4f530acd63a02ac31c
(cherry picked from commit 91945c82ec4e8eda4cdd85b77029cceccfa11769)