| commit | 4ddbf942a05ab29850c04d16575eda6e86ed6a9e | [log] [tgz] |
|---|---|---|
| author | Jeff Sharkey <jsharkey@android.com> | Wed Nov 16 17:22:48 2016 -0700 |
| committer | Jeff Sharkey <jsharkey@google.com> | Thu Nov 17 21:02:37 2016 +0000 |
| tree | 542a4ffbdbaa37f36da594e3e70309e3fa7b2915 | |
| parent | aa394dd42c049479bface1991f11b863dc1a0922 [diff] |
DO NOT MERGE: Check provider access for content changes. For an app to either send or receive content change notifications, require that they have some level of access to the underlying provider. Without these checks, a malicious app could sniff sensitive user data from the notifications of otherwise private providers. Test: builds, boots, PoC app now fails Bug: 32555637 Change-Id: If2dcd45cb0a9f1fb3b93e39fc7b8ae9c34c2fdef