| commit | f69a0da9cf2c84801976c7a98ec7653b52d8417c | [log] [tgz] |
|---|---|---|
| author | Grace Jia <xiaotonj@google.com> | Mon Aug 16 16:22:50 2021 -0700 |
| committer | Grace Jia <xiaotonj@google.com> | Mon Aug 16 23:30:17 2021 +0000 |
| tree | 2cf923c24c30e491e5a48a50a9d24c2bab2f6b44 | |
| parent | 4e4bbe66b8f8646aa5123c3124168f06d5df02b8 [diff] |
Default to use mobile network to place self-managed call when the phone account handle is not permitted to place a call. Currently, malicious can call TelecomManager#placeCall with a possible package name to read information of phone account handles. Fallback to place the self-managed call on mobile network to avoid this kind of disclosing. Bug: 191768014 Test: Manually test using debug app Change-Id: Iab5301d528aa4968874390cce17eb0e5aa599072