diff options
| author | Yohei Yukaw <yukawa@google.com> | 2015-04-06 16:48:24 -0700 |
|---|---|---|
| committer | Yohei Yukaw <yukawa@google.com> | 2015-04-06 16:52:29 -0700 |
| commit | a0f3ad1b5aabe04d9eb1df8bad34124b826ab641 (patch) | |
| tree | 2a2bb4016559e8464b911ebb92a5cd7b982867fe /keystore/java/android/security/KeyStoreParameter.java | |
| parent | 80eaa6aaaf676e7fa34ad5cd92ff161bb31b5c76 (diff) | |
Verify that EditorInfo.packageName and uid are consistent
Currently EditorInfo.packageName is filled in the application
process and passed to the IME without any verification.
With this CL, the system makes sure that the provided package
name and application's uid are consistent before establishing
the input connection. In other words, the risk of spoofed
EditorInfo.packageName will be mitigated with this change.
This should be beneficial especially when an IME wants to have
per-application settings and/or dictionaries.
Bug: 18931038
Change-Id: Ib871141e3381e45c2623c5f4d692da7a7e78fcc5
Diffstat (limited to 'keystore/java/android/security/KeyStoreParameter.java')
0 files changed, 0 insertions, 0 deletions