Google Git
Sign in
android/platform/packages/services/Telecomm/refs/heads/oreo-security-release
commit
c5ecd2ac9f943248bcfc51ab6bfe1152c6070da5
[log]
author
Grace Jia <[email protected]>
Thu Jun 18 14:12:56 2020 -0700
committer
Anis Assi <[email protected]>
Thu Sep 10 13:50:48 2020 -0700
tree
7a8f529fc371536a34851fa5d98dc9707e2cfd1e
parent
ab1e8ba6e783dc91278068456169328e6e0c8c00 [diff]
Fix security vulnerability of TelecomManager#getPhoneAccountsForPackage

Check calling package and READ_PRIVILEGED_PHONE_STATE to avoid potential
PII expotion.

Bug: 153995334
Test: atest TelecomUnitTests:TelecomServiceImpl
Change-Id: Ie834633dc4031d19af90e922ef0f111c3c8d7cb2
(cherry picked from commit 9d8d0cf3dcf741afe7ed50e60da513a47b0e8d59)
(cherry picked from commit f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1)
1 file changed
tree: 7a8f529fc371536a34851fa5d98dc9707e2cfd1e
  1. libs/
  2. proto/
  3. res/
  4. scripts/
  5. src/
  6. testapps/
  7. tests/
  8. .classpath
  9. .project
  10. Android.mk
  11. AndroidManifest.xml
  12. CleanSpec.mk
  13. proguard.flags