| commit | 0806568d4133e1dc736ebcc45f62655165366a9e | [log] [tgz] |
|---|---|---|
| author | Winson <[email protected]> | Thu Jul 08 12:07:08 2021 -0700 |
| committer | Winson Chiu <[email protected]> | Mon Jul 19 23:58:55 2021 +0000 |
| tree | a6aa25b0cd839ec52433f416cbd53389be14434f | |
| parent | 659cfbebcba688700f9e378b94e9646906ca4052 [diff] |
Unexport all PackageInstaller receivers All of PackageInstaller's declared receivers receive system broadcasts, so they do not need to be exported. Leaving them exported opens up vulnerabilities for apps to launch them and execute functionality that PackageInstaller includes. Bug: 191283525 Test: manual, verify receivers still work Test: atest com.android.packageinstaller.test.ExportedComponentTest Change-Id: I782fc21c848831a2a4aeab736cd47ad45781b290