tree 67806601a1bd69f4398695842453903676ca3c93
parent d013a047404966579bfca9dec2d57e3e8d91c158
author Pinyao Ting <pinyaoting@google.com> 1685668364 -0700
committer Fairphone ODM <fairphone-odm@localhost> 1696648297 +0800

Fix permission issue in legacy shortcut

When building legacy shortcut, Launcher calls
PackageManager#resolveActivity to retrieve necessary permission to
launch the intent.

However, when the source app wraps an arbitrary intent within
Intent#createChooser, the existing logic will fail because launching
Chooser doesn't require additional permission.

This CL fixes the security vulnerability by performing the permission
check against the intent that is wrapped within.

Bug: 270152142
Test: manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c53818a16b4322a823497726ac7e7a44501b4442)
Merged-In: If35344c08975e35085c7c2b9b814a3c457a144b0
Change-Id: If35344c08975e35085c7c2b9b814a3c457a144b0
(cherry picked from commit 400433a1afc8acc580f002c75d3848cebd29049e)