summaryrefslogtreecommitdiffstats
path: root/tools
diff options
context:
space:
mode:
authorJeff Sharkey <jsharkey@android.com>2016-11-16 17:22:48 -0700
committerBrinly Taylor <brinly@brinly.me>2017-03-13 04:54:31 +0000
commitca7312891adcdfc300f2b5c07222120de52030ea (patch)
treef1ee0b95da54e7576257412be0bbe363a45b80bd /tools
parentcb323c7ee808d49d5e78aa05a35a743ea7ab71f0 (diff)
downloadframeworks_base-ca7312891adcdfc300f2b5c07222120de52030ea.zip
frameworks_base-ca7312891adcdfc300f2b5c07222120de52030ea.tar.gz
frameworks_base-ca7312891adcdfc300f2b5c07222120de52030ea.tar.bz2
DO NOT MERGE: Check provider access for content changes.
For an app to either send or receive content change notifications, require that they have some level of access to the underlying provider. Without these checks, a malicious app could sniff sensitive user data from the notifications of otherwise private providers. Test: builds, boots, PoC app now fails Bug: 32555637 Change-Id: If2dcd45cb0a9f1fb3b93e39fc7b8ae9c34c2fdef (cherry picked from commit c813f5dae231bd8f01864227c5dba10d43a89249) (cherry picked from commit db57376d6ccbd4d3e39fc35aa8cfb561bbca4bac) mh0rst: Backport from android-7.1.1_r21
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions