| commit | d53c7efac74f2c690a86871f160a0f36fbc069ef | [log] [tgz] |
|---|---|---|
| author | Dan Bornstein <danfuzz@android.com> | Fri May 13 13:55:32 2011 -0700 |
| committer | Dan Bornstein <danfuzz@android.com> | Tue May 17 10:19:19 2011 -0700 |
| tree | b3d6321caab1eb664641687cd6ca157f890542f0 | |
| parent | cc20c55f1a752c71cd92702f64624702ca536a2e [diff] |
Address CVE-2011-1090. This adds a credentials check after connecting to the (alleged) ADB control socket, to make sure that the other side really is the system and not a malicious non-system process. Since I was in the territory, I also did some minor comment cleanup / correction (at the top of the file). This change relies on a related change in system/core. Change-Id: Iecbc4383cf285444f9d5a0414986951593777fa3