Make sure that only the owner can call [stop|start]VpnProfile()
In stopVpnProfile() & startVpnProfile, it doesn't check if the caller's package name is the same as the given one, so any app has chance to stop/start the VPN profile of other apps. Bug: 191382886 Test: atest FrameworksNetTests CtsNetTestCases \ CtsHostsideNetworkTests:HostsideVpnTests Change-Id: Ib0a6e9ed191ff8c8bd55ce9902d894b6a339ace2
Loading
Please register or sign in to comment