Skip to content
Commit 3cae0836 authored by Rhed Jao's avatar Rhed Jao
Browse files

Fix a side channel leakage for the pm#getLaunchIntentSenderForPackage

am#isIntentSenderTargetedToPackage returns false if the target intent
data has a non-null package name and a non-null component name. This
condition hits the successful case of the
pm#getLaunchIntentSenderForPackage api, and the application can
detect package's existence information via both apis. Removes the
package name from the target intent if the lauch intent is found
for the package to fix the issue.

Bug: 228450093
Test: atest AppEnumerationInternalTests
Test: atest PackageManagerTest
Change-Id: I5ec66827eae2a2416e0332694affd2f613a5e965
parent bdfb8336
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment