diff options
| author | Nazanin <nazaninb@google.com> | 2021-04-21 22:09:06 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2021-04-21 22:09:06 +0000 |
| commit | 70410d1635cc73a3486628bd6382b5cec609ccf1 (patch) | |
| tree | 3a1fd9f132b040c99cb4b5843d729c384374cc3a | |
| parent | 650e6532d9f191d72ca35ea2d4800bb17fef8948 (diff) | |
| parent | 7fd057c2308ae84fb6c313c24ec5e2f9de86e1ba (diff) | |
| download | BlockedNumberProvider-70410d1635cc73a3486628bd6382b5cec609ccf1.tar.gz | |
Security fix: as part of enforcing read privilege permission to check package am: 7fd057c230
Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/providers/BlockedNumberProvider/+/14103154
Change-Id: I56a052011a9e07043dae18261cae476afbcd4a9b
| -rw-r--r-- | src/com/android/providers/blockednumber/BlockedNumberProvider.java | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/com/android/providers/blockednumber/BlockedNumberProvider.java b/src/com/android/providers/blockednumber/BlockedNumberProvider.java index 9adf15e..50dfcb2 100644 --- a/src/com/android/providers/blockednumber/BlockedNumberProvider.java +++ b/src/com/android/providers/blockednumber/BlockedNumberProvider.java @@ -632,8 +632,13 @@ public class BlockedNumberProvider extends ContentProvider { final TelephonyManager telephonyManager = getContext().getSystemService(TelephonyManager.class); - return telephonyManager.checkCarrierPrivilegesForPackageAnyPhone(callingPackage) == - TelephonyManager.CARRIER_PRIVILEGE_STATUS_HAS_ACCESS; + final long token = Binder.clearCallingIdentity(); + try { + return telephonyManager.checkCarrierPrivilegesForPackageAnyPhone(callingPackage) == + TelephonyManager.CARRIER_PRIVILEGE_STATUS_HAS_ACCESS; + } finally { + Binder.restoreCallingIdentity(token); + } } return false; } |