summaryrefslogtreecommitdiff
path: root/rs/java/android/renderscript/ProgramFragmentFixedFunction.java
diff options
context:
space:
mode:
authorJeff Chang <chengjeff@google.com>2022-02-21 17:42:22 +0800
committerJeff Chang <chengjeff@google.com>2022-03-07 10:40:03 +0000
commit7221a25a035bc7397492e15460b40395efce7023 (patch)
tree7a9e570a64514d5d77b9ca2f0ea7167c6397135a /rs/java/android/renderscript/ProgramFragmentFixedFunction.java
parent12fb3fb9f60cf3ea4713f1c47e8387d1a584ad22 (diff)
[RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity
Any malicious application could hijack tasks by android:relinquishTaskIdentity. This vulnerability can perform UI spoofing or spy on user’s activities. This CL limit the usage which only allow system and same app to apply relinquishTaskIdentity. Based on the condition of updateIdentity from Task#setIntent, update the intent with the parent's task together to align with original code logic. Moreover, we shouldn't save launch params for such tasks with null realActivity. Bug: 185810717 Bug: 218243793 Test: atest IntentTests atest ActivityStarterTests atest TaskRecordTests atest testSplitscreenPortraitAppOrientationRequests Change-Id: I42c671e66c39c82be1dcef1f374d56d4593f9f57
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions