commit 3f9ce4c22ae9b4f0f2208c29f8c93d6ad652a1dc
author Jeff Sharkey <jsharkey@android.com> Thu Nov 03 11:43:52 2011 -0700
committer Android (Google) Code Review <android-gerrit@google.com> Thu Nov 03 11:43:52 2011 -0700
tree d2565b1bf5598c6098519173c01aa97d14477284
parent 76b067590b2e9dc403c9edac58e414468c5e1104
parent 933decaa5e9402099b1bfbbe1012633908c84d11

Merge "Verify AppWidget ownership during update." into ics-mr1

services/java/com/android/server/AppWidgetService.java

diff --git a/services/java/com/android/server/AppWidgetService.java b/services/java/com/android/server/AppWidgetService.java
index eb75ebc..2af5103 100644
--- a/services/java/com/android/server/AppWidgetService.java
+++ b/services/java/com/android/server/AppWidgetService.java
@@ -751,10 +751,13 @@
                 return;
             }
             ArrayList<AppWidgetId> instances = p.instances;
+            final int callingUid = getCallingUid();
             final int N = instances.size();
             for (int i=0; i<N; i++) {
                 AppWidgetId id = instances.get(i);
-                updateAppWidgetInstanceLocked(id, views);
+                if (canAccessAppWidgetId(id, callingUid)) {
+                    updateAppWidgetInstanceLocked(id, views);
+                }
             }
         }
     }