| commit | 9b858626204913b29dc677ee265e54cd14717484 | [log] [tgz] |
|---|---|---|
| author | Jeff Sharkey <jsharkey@android.com> | Fri Nov 18 14:23:23 2016 -0700 |
| committer | Jeff Sharkey <jsharkey@android.com> | Fri Nov 18 15:37:08 2016 -0700 |
| tree | 0e5609745f8388c415a376dade6713518db7b984 | |
| parent | b1f1209d9a3321d8bc44529406a3e210524d5e3a [diff] |
DO NOT MERGE. Check provider access for content changes. For an app to either send or receive content change notifications, require that they have some level of access to the underlying provider. Without these checks, a malicious app could sniff sensitive user data from the notifications of otherwise private providers. Test: builds, boots, PoC app now fails Bug: 32555637 Change-Id: If2dcd45cb0a9f1fb3b93e39fc7b8ae9c34c2fdef