commit | 734f18c03ae925bdda5b7000715cb5f747dd8d97 | [log] [tgz] |
---|---|---|
author | SongFerngWang <songferngwang@google.com> | Wed May 05 21:33:00 2021 +0800 |
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Thu Jul 01 10:59:42 2021 +0000 |
tree | 6bd4cd6b2c87472344246a7a8f26e8769797e9d3 | |
parent | 895b8682acf00ea2d6aa8abf80aad4275c493602 [diff] |
[security] SubscriptionGroup is exposed to unprivileged callers SubscriptionInfo.mGroupUUID is not cleared in conditionallyRemoveIdentifiers if the caller only has READ_PHONE_STATE (based on a check to checkReadPhoneState) and not READ_DEVICE_IDENTIFIERS. Bug: 181053462 Test: atest SubscriptionManagerTest Change-Id: Ic2b62523330dc6e2169ad851715c4ab3da3b29cf Merged-In: Ic2b62523330dc6e2169ad851715c4ab3da3b29cf (cherry picked from commit 219d284a68f56093aa9ca6610a4999b35c4cf5a9)