tree af677a52f371a002579e87033c7d215891dc818d
parent 9296e6acf06504f077a197d9d900e428e73c1f94
author Grace Jia <xiaotonj@google.com> 1661464039 -0700
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1670984800 +0000

Fix security vulnerability issue for multi user call redirections.

Currently we won't check if the PhoneAccountHandle provided by a
CallRedirectionService has multi-user capability or belong to the same
user as the current user. Add the check and disconnect the call if this
is an unexpected cross-user call redirection.

Bug: 235098883
Test: CallsManagerTest, manual test with test app provided in
b/235098883.

Change-Id: Ia8b9468aa2bb8e3157c227e2617ff6a52e0af119
Merged-In: Ia8b9468aa2bb8e3157c227e2617ff6a52e0af119
(cherry picked from commit f29ab7e1ec0e480e2d39d289d5aa3fc95aed2142)
(cherry picked from commit 735b84a90e5305915836329d4abca672fcc87126)
(cherry picked from commit 799347b6f65da163673b4f8358783f3087ff08a2)
Merged-In: Ia8b9468aa2bb8e3157c227e2617ff6a52e0af119