commit 3dfb1c227fc8739d8d42831171bfab2044515b75
author Jack Yu <jackyu@google.com> Mon Jan 16 10:15:34 2017 -0800
committer Teemu Hukkanen <teemu@fairphone.com> Sun Apr 23 20:13:58 2017 +0200
tree 4577e5c698e39b8cf5accafea32ed77fcff4cc4c
parent cc54b001c205f01a63dd5629b7060b16315d12af

FPII-2924 :[Part 2]Elevation of privilege vulnerability in Telephony CVE-2017-0554 A-33815946

Added permission check for setCellInfoListRate

Now the caller needs to have MODIFY_PHONE_STATE to call
this API.

Test: Manual
bug: 33815946
Change-Id: Ia2cf0de383572033c70b94ae71080ef35c3f443c
(cherry picked from commit 3128d9ec40fadccbf2be7b9e962e35b9bfbc003a)

src/com/android/phone/PhoneInterfaceManager.java

diff --git a/src/com/android/phone/PhoneInterfaceManager.java b/src/com/android/phone/PhoneInterfaceManager.java
index 2b8c34d..c1b2839 100755
--- a/src/com/android/phone/PhoneInterfaceManager.java
+++ b/src/com/android/phone/PhoneInterfaceManager.java
@@ -1336,6 +1336,7 @@
 
     @Override
     public void setCellInfoListRate(int rateInMillis) {
+        enforceModifyPermission();
         mPhone.setCellInfoListRate(rateInMillis);
     }