commit 28160b3141286f7b579696776fbce7eeeff00b6f
author markchien <markchien@google.com> Wed Sep 29 22:57:31 2021 +0800
committer markchien <markchien@google.com> Tue Apr 19 19:13:10 2022 +0800
tree cd2d3d6707139b3b5f12e8580afce8509db100d9
parent febcedef5a7cc21e14ec99147e5062f2897566cd

Fix permission bypass problem for Tethering deprecated APIs

Since the tethering functions in ConnectivityService is delegated
to TetheringManager instance and get caches informataion in
TetheringManager without checking ACCESS_NETWORK_STATE permission.
If application use reflection call getTetherXXX functions in
ConnectivityService, it can get tethering status with no additional
execution privileges needed.

Bug: 162952629
Test: manual
Ignore-AOSP-First: security fix
Change-Id: I5b897f216db19fead6ba6ac07915aa0f6ff5bf42