diff options
| author | Iván Budnik <ivanbuper@google.com> | 2022-07-19 13:22:09 +0000 |
|---|---|---|
| committer | Iván Budnik <ivanbuper@google.com> | 2022-08-18 10:50:06 +0000 |
| commit | 7319e40b37aba598e081b56095b7ed4e0a04396c (patch) | |
| tree | 4cdf63df1066a79bfe6941c3e34267a43773c7f0 /core/java/android/inputmethodservice/InputMethodService.java | |
| parent | 33e3f60e06fbeeba49854539ef7fb00900b9ec65 (diff) | |
Enforce ComponentName belongs to caller app
Add checks that enforce ComponentName's package belongs to calling app
in MediaButtonReceiverHolder and MediaSessionRecord. This avoids
privileged execution of arbitrary code.
Bug: 238177121
Test: atest CtsMediaBetterTogetherTestCases
Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897
(cherry picked from commit f5b75876def5bc973df4590ebd4ea67591afc2be)
Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897
Diffstat (limited to 'core/java/android/inputmethodservice/InputMethodService.java')
0 files changed, 0 insertions, 0 deletions