| commit | bc2c41557a266804fbab9a761af502fc6b88fb9d | [log] [tgz] |
|---|---|---|
| author | Winson <chiuwinson@google.com> | Wed Dec 11 16:44:40 2019 -0800 |
| committer | Winson <chiuwinson@google.com> | Wed Dec 11 16:46:16 2019 -0800 |
| tree | 19dfdbee7893cc77947121d0d07e66070f61c574 | |
| parent | f3c1392bdecdc27af351a880735555c197b3da60 [diff] |
Fix permission equality check Class name is not unique, and only defines the name of the permission in XML. Package name must be included in the comparison, otherwise it's possible to override a permission's attributes. Test: verify vulnerability with test apps requesting privileged permission Test: verify fixed with patch Bug: 141854898 Change-Id: I3ede88b3b8395e78ddee0508a86381d63472ffde