6728d4f92caa8a344b225cfbc1b257d14cd8c273 - platform_frameworks_base

commit	6728d4f92caa8a344b225cfbc1b257d14cd8c273	[log] [tgz]
author	Jeff Sharkey <jsharkey@android.com>	Fri Jan 15 20:53:21 2021 -0700
committer	Michael Groover <mpgroover@google.com>	Wed Jan 20 13:05:09 2021 -0800
tree	0072a8dfe6e9fca3f8fecb57838d2f695956ac81
parent	fd763b652d75b12b65251d6a7d4aede5465a3d3e [diff]

Add StrictMode check for unsafe intent launching

Exported components that are not guarded by a signature permission
can receive Intents from any other app on a device. If an app unparcels
and launches an Intent from the Intent delivered to this unprotected
component then a malicious actor can potentially craft an Intent that
could launch hidden components, grant URI permissions, etc. This
commit adds a StrictMode check to report if a component launches an
Intent unparceled from the delivered Intent.

Bug: 160796858
Test: atest StrictModeTest
Change-Id: I763b8a965f91f5b433ce2f4b619e10ef12f5c296

core/api/current.txt[diff]
core/java/android/app/ActivityThread.java[diff]
core/java/android/app/ContextImpl.java[diff]
core/java/android/app/LoadedApk.java[diff]
core/java/android/content/ClipData.java[diff]
core/java/android/content/Intent.java[diff]
core/java/android/os/StrictMode.java[diff]
core/java/android/os/strictmode/UnsafeIntentLaunchViolation.java[Added - diff]

8 files changed