| commit | 73a20462a42d582d5b91c7d83d06560939b4dc96 | [log] [tgz] |
|---|---|---|
| author | Pranav Madapurmath <pmadapurmath@google.com> | Thu Jan 02 15:04:45 2025 -0800 |
| committer | hmtheboy154 <buingoc67@gmail.com> | Sun Apr 06 10:48:43 2025 -0400 |
| tree | 52c7f3d280f49d4309aed664fdc735ac49f40552 | |
| parent | 854b41c62fcd761c22779808b6281192c6c558f5 [diff] |
Resolve cross account user icon validation. Resolves a vulnerability found with the cross account user icon validation in StatusHint and TelecomServiceImpl (when registering a phone account). The reporter found that an uri formatted as `userId%` isn't parsed properly with the existing reference to Uri.encodedUserInfo. Bug: 376461551 Bug: 376259166 Flag: EXEMPT bugfix Test: atest TelecomServiceImplTest (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4c046b179d4bdffa6d35f9637b0f4cc359a67451) Merged-In: I7a5f64ae01eaf6a133ea04c51bd00dbe1653b74f Change-Id: I7a5f64ae01eaf6a133ea04c51bd00dbe1653b74f