Skip to content
Commit f34a2f9b authored by Rhed Jao's avatar Rhed Jao
Browse files

Fix package usage of instant app can be updated by unprivileged app

IPackageManager#notifyPackageUse used #isInstantApp api to determine
whether the target package is instant app or not. But #isInstantApp
return true only if called by itself or by somebody who can view
instant apps or by somebody has has been granted with access. It
results in the api fails to check instant app then allowing an
unprivileged app to update the package usage of an instant app.

This CL uses #isInstantAppInternal with the system uid to pass the
checks and fix the issue.

Bug: 201534884
Test: Manual, follow the steps in the bug
Change-Id: I4ad68be5145a165e8d8c93b6d26ccf0e8bc084c3
Merged-In: I4ad68be5145a165e8d8c93b6d26ccf0e8bc084c3
(cherry picked from commit 6e441b98)
parent 8316f682
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment