commit 2612c795283ac981f08f31d39f5dbf7e24bcae69
author Rambo Wang <rambowang@google.com> Wed Apr 28 17:51:36 2021 -0700
committer Rambo Wang <rambowang@google.com> Wed Jun 23 03:27:50 2021 +0000
tree ddb9502fd21591d177f6cb180f5163f29347ceca
parent aecd5b15aca219592637b585a770c0888ddbd56c

ServiceStateProvider: sanitize location info if caller has no permission

Telephony#ServiceStateTable requires no read permission when
applications try to get the ServiceState for supported subscriptions.
This may leak location sensitive infos and bring security and
privacy concern.

The fix follows the same policy as TelephonyManager#getServiceState
and scrubs out location info from ServiceState when needed before
returning to clients.

Bug: 182384053
Test: atest com.android.phone.ServiceStateProviderTest
Test: atest android.telephonyprovider.cts.ServiceStateTest

Change-Id: I176fb3fbe02bcdc36b900c62f8a59344426f077b