| commit | 0ed0ea1e3da175f0dac03d6fd59de6fd4cfc5872 | [log] [tgz] |
|---|---|---|
| author | Pranav Madapurmath <pmadapurmath@google.com> | Tue Jun 11 22:50:08 2024 -0700 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Fri Jul 19 20:25:00 2024 +0000 |
| tree | 5c941056c9252ab64349b06c6593105542de4f4a | |
| parent | 8cf4b262bf07ba2a1d4a6acee3efb495f6a7e910 [diff] |
Resolve cross-user image exploit for conference status hints Ensure that status hint image icon is validated for cross-user exploits. Currently, there is no check for this so a conference call can display an image from another user, exposing a vulnerability. Bug: 329058967 Test: Manual with POC (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:8c619f58c00047ab0ec687cd231bf93a08db6d55) Merged-In: Ib9d701398d25d021cdb9abacbaa5b175f62bee1d Change-Id: Ib9d701398d25d021cdb9abacbaa5b175f62bee1d