tree 8e26b17df49af0c32687729512c9ca8e914fd46e
parent 397065c0f1c40b907c3fab6396d654c4a5b71341
author Azhara Assanova <azharaa@google.com> 1673453863 +0000
committer Azhara Assanova <azharaa@google.com> 1673454539 +0000

Make mutable PendingIntent explicit

Starting from target SDK U, we will block creation of mutable
PendingIntents with implicit Intents because attackers can mutate the
Intent object within and launch altered behavior on behalf of victim
apps. For more details on the vulnerability, see go/pendingintent-rca.

From a quick analysis, we concluded that the PendingIntent here was only
destined to the test app/to the app, so it was made explicit. Reviewers,
please call out if this is not the case.

Bug: 236704164
Bug: 229362273
Test: TH passes
Change-Id: I55f4cbf3824b988a164fb7087e99007f3d551833