commit 52bcd222e64ccf98c45ca882f80e3f1f65138b52
author Jeff Chang <chengjeff@google.com> Mon Feb 21 17:42:22 2022 +0800
committer Bharath <bharath@fairphone.com> Mon Jul 11 18:24:37 2022 +0530
tree 4ee92734c7689e1954d3bda2d9aec85b93a684fb
parent 066e147f48a13525889a069b6f2715e096fc1998

Only allow system and same app to apply relinquishTaskIdentity

Any malicious application could hijack tasks by
android:relinquishTaskIdentity. This vulnerability can perform UI
spoofing or spy on user’s activities.

This CL limit the usage which only allow system and same app to apply
relinquishTaskIdentity. Based on the condition of updateIdentity from
Task#setIntent, update the intent with the parent's task together to
align with original code logic. Moreover, we shouldn't save launch
params for such tasks with null realActivity.

Bug: 185810717
Bug: 218243793
Test: atest IntentTests
      atest ActivityStarterTests
      atest TaskRecordTests
      atest testSplitscreenPortraitAppOrientationRequests
Change-Id: I42c671e66c39c82be1dcef1f374d56d4593f9f57
(cherry picked from commit 7221a25a035bc7397492e15460b40395efce7023)
Merged-In: I42c671e66c39c82be1dcef1f374d56d4593f9f57