| commit | cf4a1b8498744dce7aa64734145a073bd8af17ac | [log] [tgz] |
|---|---|---|
| author | Grant Menke <grantmenke@google.com> | Mon Oct 28 16:42:25 2024 -0700 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Wed Dec 18 08:27:03 2024 -0800 |
| tree | e0a61752f686619a18340af1ce835443efc220e2 | |
| parent | 3fe9bae1435a3153cb976d0cc4001523c3859d38 [diff] |
Unbind CS if connection is not created within 15 seconds. This CL adds a check to ensure that connection creation occurs within 15 seconds after binding to that ConnectionService. If the connection/conference is not created in that timespan, this CL adds logic to manually unbind the ConnectionService at that point in time. This prevents malicious apps from keeping a declared permission in forever even in the background. This updated CL includes a null check to avoid a NPE that occurred in the first iteration of this change. Bug: 293458004 Test: manually using the provided apk + atest CallsManagerTest Flag: EXEMPT Security High/Critical Severity CVE (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:48d6b0df91fb1c8c0b11891f878084c6d8f9fa8a) Merged-In: If46cfa26278f09854c10266af6eaa73382f20296 Change-Id: If46cfa26278f09854c10266af6eaa73382f20296