80f6a985c3662bc65ffba83975ec23c1a93ed888 - platform/frameworks/base

commit	80f6a985c3662bc65ffba83975ec23c1a93ed888	[log] [tgz]
author	Seigo Nonaka <nona@google.com>	Thu Jun 22 08:22:18 2017 -0700
committer	Seigo Nonaka <nona@google.com>	Thu Jun 22 19:07:17 2017 -0700
tree	49632f94afc3270d5759dcf4160e8f77847ca7b9
parent	2ef19c1d73f89ca4718b5a8f0c2e7221621e844f [diff]

Stop loading other package's font by default.

Since CONTEXT_RESTRICTED is not a default flag of createPackageContext,
we can't rely on it for preventing unexpected font injections.
To protect developers and existing apps from a risk of font injection,
stop loading font from other package's resouce unless the developer
explicitly set CONTEXT_IGNORE_SECURITY.

This CL contains Iac2a6fb3d82ef23d5ca6ee33f4aaa9ed28455271 by manual
merging to handle repository split.

Bug: 62813533
Bug: 62879353
Test: Manually done
Merged-In: I4442ddc48dadb5c968b444be86038b602074d301
Change-Id: I4442ddc48dadb5c968b444be86038b602074d301

core/java/android/app/ContextImpl.java[diff]
core/java/android/content/Context.java[diff]
core/java/android/content/ContextWrapper.java[diff]
core/java/android/widget/TextView.java[diff]
test-runner/src/android/test/mock/MockContext.java[diff]
tools/layoutlib/bridge/src/com/android/layoutlib/bridge/android/BridgeContext.java[diff]

6 files changed

tree: 49632f94afc3270d5759dcf4160e8f77847ca7b9