Skip to content
Commit cb7df6cd authored by Rhed Jao's avatar Rhed Jao
Browse files

Fix side channel disclosure via add or remove permission api

The application can read installed packages without requiring any
permission via PackageManager#addPermission or
PackageManager#removePermission API. The different messages of
security exception were thrown from the API for the application
to read installed packages information. This CL used the same
exception message in the enforcePermissionTree to fix the issue.

Bug: 186405104
Bug: 187408450
Test: Cannot reproduce vai PoC application
Change-Id: I80b5c23c56b1652fdf6321cfdde12a4efa087163
parent 362c83f7
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment