diff options
| author | Paul Jensen <pauljensen@google.com> | 2015-08-28 12:00:15 -0400 |
|---|---|---|
| committer | Paul Jensen <pauljensen@google.com> | 2015-08-28 12:50:09 -0400 |
| commit | 2b6af396ad14def9a967f62cccc87ee715823bb1 (patch) | |
| tree | 27fe7fb1ba9bc767ba4d898bd74d5fcb498e3515 | |
| parent | a12044215b1148826ea9a88d5d1102378b13922f (diff) | |
| download | frameworks_base-2b6af396ad14def9a967f62cccc87ee715823bb1.zip frameworks_base-2b6af396ad14def9a967f62cccc87ee715823bb1.tar.gz frameworks_base-2b6af396ad14def9a967f62cccc87ee715823bb1.tar.bz2 | |
Don't mark NetworkRequests restricted when they don't have restricted caps
Requests without NET_CAPABILITIES_INTERNET and just the default network
capabilities should not be marked restricted. Without this fix apps
can hit permissions exceptions if they inadvertently make requests
without NET_CAPABILITIES_INTERNET.
Bug:23164917
Change-Id: I4c7136821315bcb05dfc42ffbc505a5d4f6109e6
(cherry picked from commit aae613d96134245af7c55976731a49fa59e77470)
| -rw-r--r-- | core/java/android/net/NetworkCapabilities.java | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/core/java/android/net/NetworkCapabilities.java b/core/java/android/net/NetworkCapabilities.java index 2e22697..04ebc7c 100644 --- a/core/java/android/net/NetworkCapabilities.java +++ b/core/java/android/net/NetworkCapabilities.java @@ -285,8 +285,12 @@ public final class NetworkCapabilities implements Parcelable { public void maybeMarkCapabilitiesRestricted() { // If all the capabilities are typically provided by restricted networks, conclude that this // network is restricted. - if ((mNetworkCapabilities & ~(DEFAULT_CAPABILITIES | RESTRICTED_CAPABILITIES)) == 0) + if ((mNetworkCapabilities & ~(DEFAULT_CAPABILITIES | RESTRICTED_CAPABILITIES)) == 0 && + // Must have at least some restricted capabilities, otherwise a request for an + // internet-less network will get marked restricted. + (mNetworkCapabilities & RESTRICTED_CAPABILITIES) != 0) { removeCapability(NET_CAPABILITY_NOT_RESTRICTED); + } } /** |