Fix side channel disclosure via add or remove permission api
The application can read installed packages without requiring any permission via PackageManager#addPermission or PackageManager#removePermission API. The different messages of security exception were thrown from the API for the application to read installed packages information. This CL used the same exception message in the enforcePermissionTree to fix the issue. Bug: 186405104 Bug: 187408450 Test: Cannot reproduce vai PoC application Change-Id: I80b5c23c56b1652fdf6321cfdde12a4efa087163
Loading
Please register or sign in to comment