diff options
| author | Rubin Xu <rubinxu@google.com> | 2020-05-14 15:31:16 +0100 |
|---|---|---|
| committer | Rubin Xu <rubinxu@google.com> | 2020-05-15 20:41:23 +0100 |
| commit | aacf94557d2fa720421abd5fed248bdfac8f8c24 (patch) | |
| tree | 68ca5d00f2f8dd96af5f992f20b84fdb4d5c5c34 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | b8ad491e6d81ae96f43f57cddbd50060cdde27f5 (diff) | |
Set explicit target when constructing PendingIntent
PendingIntent as part of a notification can be intercepted by
a malicious app and re-fired with crafted intent arguments.
System server should set explicit target for these intents
to avoid it being fired to other apps with system privilege.
Bug: 155183624
Test: atest FrameworksServicesTests:DevicePolicyManagerTest
Test: Set a DO/PO with TestDPC, turn on location, verify notification
works
Test: set a DO with TestDPC, request remote bugreport and verify
notifcation works
Change-Id: Ib7d0039c3d07a9d1ccf57e944303353ec9e9b66d
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions