79f82b24a1abbd5f53b004c7c3f78babf1d48e2c - platform_frameworks_base

commit	79f82b24a1abbd5f53b004c7c3f78babf1d48e2c	[log] [tgz]
author	Tetiana Meronyk <tetianameronyk@google.com>	Wed Jan 10 16:25:13 2024 +0000
committer	Tetiana Meronyk <tetianameronyk@google.com>	Tue Jan 16 11:06:43 2024 +0000
tree	3e797b6ec3bcc0165de9ed3a821b5bfb2c1b4eb3
parent	3aab4138a40f83a11a931711a3e97b4c92384044 [diff]

Fix security vulnerability that creates user with no restrictions when accountOptions are too long.

Bug: 293602970
Test: atest UserManagerTest#testAddUserAccountData_validStringValuesAreSaved_validBundleIsSaved && atest UserManagerTest#testAddUserAccountData_invalidStringValuesAreTruncated_invalidBundleIsDropped
Change-Id: I23c971f671546ac085060add89485cfac6691ca3
Merged-In: I23c971f671546ac085060add89485cfac6691ca3

core/java/android/os/PersistableBundle.java[diff]
core/java/android/os/UserManager.java[diff]
core/java/com/android/internal/app/ConfirmUserCreationActivity.java[diff]
services/core/java/com/android/server/pm/UserManagerService.java[diff]
services/tests/mockingservicestests/src/com/android/server/pm/UserManagerServiceTest.java[diff]
services/tests/servicestests/src/com/android/server/pm/UserManagerTest.java[diff]

6 files changed