commit 7221a25a035bc7397492e15460b40395efce7023
author Jeff Chang <chengjeff@google.com> Mon Feb 21 17:42:22 2022 +0800
committer Jeff Chang <chengjeff@google.com> Mon Mar 07 10:40:03 2022 +0000
tree 7a9e570a64514d5d77b9ca2f0ea7167c6397135a
parent 12fb3fb9f60cf3ea4713f1c47e8387d1a584ad22

[RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity

Any malicious application could hijack tasks by
android:relinquishTaskIdentity. This vulnerability can perform UI
spoofing or spy on user’s activities.

This CL limit the usage which only allow system and same app to apply
relinquishTaskIdentity. Based on the condition of updateIdentity from
Task#setIntent, update the intent with the parent's task together to
align with original code logic. Moreover, we shouldn't save launch
params for such tasks with null realActivity.

Bug: 185810717
Bug: 218243793
Test: atest IntentTests
      atest ActivityStarterTests
      atest TaskRecordTests
      atest testSplitscreenPortraitAppOrientationRequests
Change-Id: I42c671e66c39c82be1dcef1f374d56d4593f9f57