| commit | 692a877db4b7eb01f1c093d359c0736465d59472 | [log] [tgz] |
|---|---|---|
| author | Grace Jia <xiaotonj@google.com> | Wed Jul 14 14:35:27 2021 -0700 |
| committer | Grace Jia <xiaotonj@google.com> | Wed Jul 14 14:35:27 2021 -0700 |
| tree | 67a930c9fe3e0573f691ac3dd457f46d76142129 | |
| parent | eafcfb2fe06a0a82f54bf1621c8d614ce0a2bd2e [diff] |
Check calling package before checking permission protection Using the name of a third-party package targeting a lower API level can bypass the whole permission check in TelecomServiceImpl#getCallStateUsingPackage. Check the calling package first to avoid this. Bug: 190400974 Test: Unit test, test with debug app Change-Id: I2b0bfde41f006c2010381a85100ce931366abf57