| commit | ff7be9912fae5a04c2703a113160782dad9509a8 | [log] [tgz] |
|---|---|---|
| author | Iván Budnik <ivanbuper@google.com> | Tue Jul 19 13:22:09 2022 +0000 |
| committer | Iván Budnik <ivanbuper@google.com> | Tue Aug 09 16:46:08 2022 +0000 |
| tree | e81862d251ff52c5b9085ea088b4a971909b50cb | |
| parent | d011967068c10a42a0d24524472bce39bce5b1cf [diff] |
Enforce ComponentName belongs to caller app Add checks that enforce ComponentName's package belongs to calling app in MediaButtonReceiverHolder and MediaSessionRecord. This avoids privileged execution of arbitrary code. Bug: 238177121 Test: atest CtsMediaBetterTogetherTestCases Change-Id: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897 Merged-In: Iac143d8bbc9422f3ca3f42f8c0154b9906ecd897