diff options
author | Jeff Chang <chengjeff@google.com> | 2022-02-21 17:42:22 +0800 |
---|---|---|
committer | Jeff Chang <chengjeff@google.com> | 2022-03-07 10:40:03 +0000 |
commit | 7221a25a035bc7397492e15460b40395efce7023 (patch) | |
tree | 7a9e570a64514d5d77b9ca2f0ea7167c6397135a /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
parent | 12fb3fb9f60cf3ea4713f1c47e8387d1a584ad22 (diff) |
[RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity
Any malicious application could hijack tasks by
android:relinquishTaskIdentity. This vulnerability can perform UI
spoofing or spy on user’s activities.
This CL limit the usage which only allow system and same app to apply
relinquishTaskIdentity. Based on the condition of updateIdentity from
Task#setIntent, update the intent with the parent's task together to
align with original code logic. Moreover, we shouldn't save launch
params for such tasks with null realActivity.
Bug: 185810717
Bug: 218243793
Test: atest IntentTests
atest ActivityStarterTests
atest TaskRecordTests
atest testSplitscreenPortraitAppOrientationRequests
Change-Id: I42c671e66c39c82be1dcef1f374d56d4593f9f57
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions