commit e64601c0ab10401d426ffcba5aae0d45b8abdc85
author Prashantsinh Parmar <prashantsinh.parmar@fairphone.partners> Fri Feb 09 19:20:41 2024 +0530
committer Prashantsinh Parmar <prashantsinh.parmar@fairphone.partners> Fri Mar 08 06:14:24 2024 +0100
tree a39c3892ed910377ad23e1f7b5199ec52811233f
parent 3b50292e5e3761eb448e1eec3da389a6de26105a
parent 96f8a0fc810576964b900e5bece59d82ec28146d

Merge tag 'android-security-13.0.0_r14' into int/13/fp3

Android Security 13.0.0 Release 14 (11228180)

* tag 'android-security-13.0.0_r14':
  Fix permission bypass in legacy shortcut

Change-Id: I625aaca656ea88d879cb93e5e632289c61853310

src/com/android/launcher3/util/PackageManagerHelper.java

diff --git a/src/com/android/launcher3/util/PackageManagerHelper.java b/src/com/android/launcher3/util/PackageManagerHelper.java
index 586e0c9..a6094b6 100644
--- a/src/com/android/launcher3/util/PackageManagerHelper.java
+++ b/src/com/android/launcher3/util/PackageManagerHelper.java
@@ -147,15 +147,8 @@
     public boolean hasPermissionForActivity(Intent intent, String srcPackage) {
         // b/270152142
         if (Intent.ACTION_CHOOSER.equals(intent.getAction())) {
-            final Bundle extras = intent.getExtras();
-            if (extras == null) {
-                return true;
-            }
-            // If given intent is ACTION_CHOOSER, verify srcPackage has permission over EXTRA_INTENT
-            intent = (Intent) extras.getParcelable(Intent.EXTRA_INTENT);
-            if (intent == null) {
-                return true;
-            }
+            // Chooser shortcuts is not a valid target
+            return false;
         }
         ResolveInfo target = mPm.resolveActivity(intent, 0);
         if (target == null) {