tree 49603fcc0efa6f81e2215aa7ee1108e2eec4d331
parent 5d377bbcdc6fbbb96428d88e04b9673fa333e0a8
author Pranav Madapurmath <pmadapurmath@google.com> 1679441336 +0000
committer Bharath <bharath@teamb58.org> 1685964711 +0530

Call Redirection: unbind service when onBind returns null

The call redirection service does not handle the corner case of
onNullBinding (occurs when onBind returns null). This vulnerability
would give the app that has the call redirection role unintentional
access to launch background activities outside the scope of a call
lifecycle.

Fixes: 273260090
Test: Unit test to ensure we unbind the service on null onBind
Test: CTS for similar assertion
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:9b753a1d0d1e563b3363ecd49f7f9d0100200cab)
Merged-In: Ib9d44d239833131eb055e83801cb635e8efe0b81
Change-Id: Ib9d44d239833131eb055e83801cb635e8efe0b81