diff options
| author | Rhed Jao <rhedjao@google.com> | 2021-08-23 11:42:36 +0800 |
|---|---|---|
| committer | Rhed Jao <rhedjao@google.com> | 2021-08-24 02:36:19 +0000 |
| commit | cb7df6cd279e4dbe305cb5b186624893298d5481 (patch) | |
| tree | e4e7f5a251f82cd73b0e92ab8d366bb9f754b537 /core/java/android/inputmethodservice/AbstractInputMethodService.java | |
| parent | 362c83f7b5c821acc81d1399d8e5c6085cf8bbdd (diff) | |
Fix side channel disclosure via add or remove permission api
The application can read installed packages without requiring any
permission via PackageManager#addPermission or
PackageManager#removePermission API. The different messages of
security exception were thrown from the API for the application
to read installed packages information. This CL used the same
exception message in the enforcePermissionTree to fix the issue.
Bug: 186405104
Bug: 187408450
Test: Cannot reproduce vai PoC application
Change-Id: I80b5c23c56b1652fdf6321cfdde12a4efa087163
Diffstat (limited to 'core/java/android/inputmethodservice/AbstractInputMethodService.java')
0 files changed, 0 insertions, 0 deletions