| commit | e5c3c8cccd81a9784abb96b9e165abd5fb76fd29 | [log] [tgz] |
|---|---|---|
| author | junyulai <junyulai@google.com> | Tue Apr 30 14:42:05 2019 +0800 |
| committer | junyulai <junyulai@google.com> | Fri May 10 00:36:58 2019 +0800 |
| tree | 680e31783332a2f1708b1143f6c95ad23692b52b | |
| parent | a91094aeb6a32bcbe79746c09e9f7f135f8c97e9 [diff] |
Limit unprivileged keepalives per uid Public APIs for creating unprivileged NATT socket keepalive might allow users to exhaust resource if malicious apps try to create keepalives with fd which is not created by IpSecService through binder call. Thus, this change add customizable limitation per uid to prevent resource exhaustion attack. Bug: 129371366 Bug: 132307230 Test: atest FrameworksNetTests Change-Id: Ibcb91105e46f7e898b8aa7c2babc3344ef2c6257