| commit | b24fb55032137f27ba6ba78501283428c077af9e | [log] [tgz] |
|---|---|---|
| author | Pranav Madapurmath <pmadapurmath@google.com> | Tue Mar 21 23:28:56 2023 +0000 |
| committer | Bharath <bharath@teamb58.org> | Mon Jun 05 17:01:51 2023 +0530 |
| tree | 49603fcc0efa6f81e2215aa7ee1108e2eec4d331 | |
| parent | 5d377bbcdc6fbbb96428d88e04b9673fa333e0a8 [diff] |
Call Redirection: unbind service when onBind returns null The call redirection service does not handle the corner case of onNullBinding (occurs when onBind returns null). This vulnerability would give the app that has the call redirection role unintentional access to launch background activities outside the scope of a call lifecycle. Fixes: 273260090 Test: Unit test to ensure we unbind the service on null onBind Test: CTS for similar assertion (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:9b753a1d0d1e563b3363ecd49f7f9d0100200cab) Merged-In: Ib9d44d239833131eb055e83801cb635e8efe0b81 Change-Id: Ib9d44d239833131eb055e83801cb635e8efe0b81