| commit | d722e780bac7685e8a012b5f479eba8c348c3c53 | [log] [tgz] |
|---|---|---|
| author | Jeff Sharkey <jsharkey@android.com> | Mon Jun 12 17:33:07 2017 -0600 |
| committer | Jeff Sharkey <jsharkey@google.com> | Tue Jun 13 19:44:03 2017 +0000 |
| tree | 8794def3cb25105022c6446677ae44ac655337d9 | |
| parent | 4cb3ae605ce2b09119cb3317e3fb540a4dd5295a [diff] |
KEY_INTENT shouldn't grant permissions. KEY_INTENT has no business granting any Uri permissions, so remove any grant flags that malicious apps may have tried sneaking in. Also fix ordering bug in general-purpose security check that was allowing FLAG_GRANT_PERSISTABLE to bypass it. Test: builds, boots Bug: 32990341, 32879915 Change-Id: I657455a770c81f045ccce6abbd2291407a1cfb42