| commit | 1c7fbd70da65f7b2dd561af8ec9f94b81acf5baa | [log] [tgz] |
|---|---|---|
| author | Grant Menke <grantmenke@google.com> | Thu Jan 16 15:00:42 2025 -0800 |
| committer | Grant Menke <grantmenke@google.com> | Fri Jan 17 15:06:15 2025 -0800 |
| tree | 3be79cb073f2c0147a5b31415f92345fafd4c9d4 | |
| parent | 14e8227996e291237a9fe2388648d5544ef6b3b7 [diff] |
Resolve cross account user ringtone validation. Resolves a vulnerability found with the lack of cross account user ringtone validation in RingtoneFactory. The reporter found that a ringtone file owned by a different user can be accessed and played by the user who does not own that file. Bug: 356604577 Flag: EXEMPT Critical CVE bugfix Test: RingtoneFactoryTest Change-Id: Ie28e8d0890086caada561ed27dd660836e6aa6bb