diff options
| author | Charles He <qiurui@google.com> | 2017-05-04 16:02:38 +0100 |
|---|---|---|
| committer | Charles He <qiurui@google.com> | 2017-05-05 10:06:40 +0100 |
| commit | 29b3a8ad26cc416c4fd6ca3444e9c22507bc3778 (patch) | |
| tree | 48c62203c47c514394f5025e3c7900e2dd12738f /tests/DynamicCodeLoggerIntegrationTests/src/cpp/test_executable.cpp | |
| parent | a20b6ba1f2727501eab7f5c8b34607a0c02b4a74 (diff) | |
FingerprintService: refresh auth id after enroll and remove.
FingerprintService maintains a field (mAuthenticatorIds) to keep track
of the current authenticator ids of all users / profiles. It is queried
when, for example, KeyStore generates a fingerprint-bound key.
Previously, mAuthenticatorIds was not immediately updated after finger
enrollment or removal, which meant the cached authenticator id would
remain outdated until the next updateActiveGroup(). Consequently,
fingerprint-bound keys generated during this period would be incorrectly
invalidated.
In this CL, we call updateActiveGroup() when a new fingerprint is
enrolled and when all fingerprints are removed in a group. We also
ensure that getAuthenticatorId() returns 0 when the calling user has no
fingerprints enrolled, although the daemon returns a non-zero value.
Bug: 31692813
Test: manual
Test: CTS verifier > Security > Fingerprint Bound Keys Test
Change-Id: I07ea330ae0f662cefdbb54e164281e1185aafdd7
Diffstat (limited to 'tests/DynamicCodeLoggerIntegrationTests/src/cpp/test_executable.cpp')
0 files changed, 0 insertions, 0 deletions