tree 117a502cda04aea93d704bddbd17522f9f2efc7c
parent 4f0e6c56e3b26d83df2aed5442e90360b1bf6809
author Grant Menke <grantmenke@google.com> 1714067023 -0700
committer hmtheboy154 <buingoc67@gmail.com> 1739599866 -0500
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQGzBAABCgAdFiEEVIAjDYTrCjldmpihZmIX9QOxffUFAmewL/oACgkQZmIX9QOx
 ffUUggv+OE9qvqJUNdItNlkbnM7jYVxUREilbl/daqM2iPdmO/TM1fQernmOiFyF
 gjyg72i2ybuLViOEvhtZEqbdilY7mB0DF61LighfmaPuR7OvIN0z3pI8ne3678Dp
 Txg8qFYPr78CtzYS/ILI1N43IC7hc+zdvUVz/pbL0rftz4tX08zxnVAi41l7WgT2
 FhteVSyIghQihFXSDPRVo44X0mAXTPJWqF2DGj3nHbZMeGEr918VRfvuMITHuyfl
 bJPFqxU16yfbjw1f8lD1g8B/tE6UQ2yqLyf38HcfDLMulJx99Xt6U2fezPxtHqzC
 c+x2E7PHPIQSHT/WEkQ8gWHnszhN57fxZTY20La8con8tPC2HjThUe2se6Efc+HW
 ywiUAXdWxgaD+n/cDQPursoBDk2MOpRCjbbwwWnQFJvCnVMb1eb0VLqub6IZf1OJ
 OTBuGZcl2GRPpGT9t2m8W84vYKZQjCzAvOrQJnqBeoC5Ruhbpac0h7HI4aJuOEfA
 2lrjS7yG
 =r2lu
 -----END PGP SIGNATURE-----

DO NOT MERGE
Unbind CS if connection is not created within 15 seconds.

This CL adds a check to ensure that connection creation occurs within 15 seconds after binding to that ConnectionService. If the connection/conference is not created in that timespan, this CL adds logic to manually unbind the ConnectionService at that point in time. This prevents malicious apps from keeping a declared permission in forever even in the background.

Bug: 293458004
Test: manually using the provided apk + atest CallsManagerTest
Flag: EXEMPT Security High/Critical Severity CVE
(cherry picked from commit 7aa55ffca65d6166145fd9660e0f7340c07053bf)
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:286781dfcb78d8b5c1a77f2390f5251f01943add)
Merged-In: I30caed1481dff5af2223a8ff589846597cee8229
Change-Id: I30caed1481dff5af2223a8ff589846597cee8229