summaryrefslogtreecommitdiff
path: root/tools/aidl/generate_java.cpp
diff options
context:
space:
mode:
authorNicholas Ambur <nambur@google.com>2020-02-19 18:11:30 -0800
committerNicholas Ambur <nambur@google.com>2020-02-25 01:20:05 +0000
commit1ec50c8f2f547df3677f3fab2ee1c39ee4209063 (patch)
treea839de82aeb8cbbca7a1ea6de18534c0da77c3e9 /tools/aidl/generate_java.cpp
parent56d9d677e8a0f1dedce778f1ec28a590bcc56fdb (diff)
remove client token passing active VI service
Previous implementation relied on client to pass a token which the service used to verify if it was the active service. This is seen to be a security concern as there is no way to verify how the client obtained the token. Instead, a check is done to confirm the caller's UID matches the UID of the active service. In the case of voice model enrollment, KeyphraseEnrollmentInfo class is leveraged. A client is allowed to enroll if it is the active voice interaction service or if it is a voice model enrollment application bundled with the system image. All previous manifest permision checks still apply. Bug: 148159858 Test: gts-tradefed run gts-dev -m GtsAssistIntentTestCases -t \ com.google.android.assist.gts.KeyphraseModelManagerTest \ \#testShouldEnrollOnlyWhenActiveService Merged-In: Ie2c4653d365770a9123a22bc69822518b4ccc568 Change-Id: Ie2c4653d365770a9123a22bc69822518b4ccc568 (cherry picked from commit c6f4118f9e86f666817bc10a5dbae51d0dabacb8)
Diffstat (limited to 'tools/aidl/generate_java.cpp')
0 files changed, 0 insertions, 0 deletions