f88ebeb2506d3daed3fe0a71f6e1f5cde34406cd - platform/frameworks/base

commit	f88ebeb2506d3daed3fe0a71f6e1f5cde34406cd	[log] [tgz]
author	Sudheer Shanka <sudheersai@google.com>	Tue Feb 14 18:30:40 2017 -0800
committer	Sudheer Shanka <sudheersai@google.com>	Tue Feb 14 18:35:05 2017 -0800
tree	24d04fc08560de712dceaffcb751149b9ccb0fd3
parent	d725de1e863db7f001e423b6262c9c7b8b7d1167 [diff]

Use correct packageName for checking if it belongs to callingUid.

In AccountManagerService.getAccountsAsUser, we check if opPackageName
belongs to calling uid by calling AppOpsManager.checkPackage. But when
AccountManagerService.getAccountsAsUser is called from
AccountManagerService.addSharedAccountsFromParentUser, we're using the
opPackageName from system context instead of calling context.

Bug: 35258008
Test: cts-tradefed run singleCommand cts-dev --module CtsMultiUserHostTestCases \
      -t android.host.multiuser.CreateUsersPermissionTest#testCanCreateRestrictedUser
Change-Id: I5c425d9314beb86f7c64a5b5c64b7d879711879a

cmds/pm/src/com/android/commands/pm/Pm.java[diff]
core/java/android/accounts/AccountManager.java[diff]
core/java/android/accounts/IAccountManager.aidl[diff]
services/core/java/com/android/server/accounts/AccountManagerService.java[diff]

4 files changed

tree: 24d04fc08560de712dceaffcb751149b9ccb0fd3