mirror of
https://github.com/Divested-Mobile/DivestOS-Build.git
synced 2024-06-26 14:42:13 +00:00
082bc48c32
https://review.lineageos.org/q/topic:P_asb_2022-05 https://review.lineageos.org/q/topic:P_asb_2022-06 https://review.lineageos.org/q/topic:P_asb_2022-07 https://review.lineageos.org/q/topic:P_asb_2022-08 https://review.lineageos.org/q/topic:P_asb_2022-09 https://review.lineageos.org/q/topic:P_asb_2022-10 https://review.lineageos.org/q/topic:P_asb_2022-11 https://review.lineageos.org/q/topic:P_asb_2022-12 https://review.lineageos.org/q/topic:P_asb_2023-01 https://review.lineageos.org/q/topic:P_asb_2023-02 https://review.lineageos.org/q/topic:P_asb_2023-03 https://review.lineageos.org/q/topic:P_asb_2023-04 https://review.lineageos.org/q/topic:P_asb_2023-05 https://review.lineageos.org/q/topic:P_asb_2023-06 https://review.lineageos.org/q/topic:P_asb_2023-07 accounted for via manifest change: https://review.lineageos.org/c/LineageOS/android_external_freetype/+/361250 https://review.lineageos.org/q/topic:P_asb_2023-08 accounted for via manifest change: https://review.lineageos.org/c/LineageOS/android_external_freetype/+/364606 accounted for via patches: https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/365328 https://review.lineageos.org/q/topic:P_asb_2023-09 https://review.lineageos.org/q/topic:P_asb_2023-10 https://review.lineageos.org/q/topic:P_asb_2023-11 accounted for via patches: https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/374916 https://review.lineageos.org/q/topic:P_asb_2023-12 https://review.lineageos.org/q/topic:P_asb_2024-01 https://review.lineageos.org/q/topic:P_asb_2024-02 https://review.lineageos.org/q/topic:P_asb_2024-03 https://review.lineageos.org/q/topic:P_asb_2024-04 Signed-off-by: Tavi <tavi@divested.dev>
39 lines
2.1 KiB
Diff
39 lines
2.1 KiB
Diff
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
From: Raphael Kim <raphk@google.com>
|
|
Date: Mon, 18 Sep 2023 14:07:23 -0700
|
|
Subject: [PATCH] Validate component name length before requesting notification
|
|
access.
|
|
|
|
Bug: 295335110
|
|
Test: Test app with long component name
|
|
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:447216ecbe5f22ea06379d9587dae530b1202fe8)
|
|
Merged-In: I7ea5d5c1f78858db9865f3310d1e0aff9c8b5579
|
|
Change-Id: I7ea5d5c1f78858db9865f3310d1e0aff9c8b5579
|
|
---
|
|
.../server/companion/CompanionDeviceManagerService.java | 5 +++++
|
|
1 file changed, 5 insertions(+)
|
|
|
|
diff --git a/services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java b/services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java
|
|
index e39652d77b7a..087fe8560fc8 100644
|
|
--- a/services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java
|
|
+++ b/services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java
|
|
@@ -107,6 +107,8 @@ public class CompanionDeviceManagerService extends SystemService implements Bind
|
|
private static final boolean DEBUG = false;
|
|
private static final String LOG_TAG = "CompanionDeviceManagerService";
|
|
|
|
+ private static final int MAX_CN_LENGTH = 500;
|
|
+
|
|
private static final String XML_TAG_ASSOCIATIONS = "associations";
|
|
private static final String XML_TAG_ASSOCIATION = "association";
|
|
private static final String XML_ATTR_PACKAGE = "package";
|
|
@@ -290,6 +292,9 @@ public class CompanionDeviceManagerService extends SystemService implements Bind
|
|
String callingPackage = component.getPackageName();
|
|
checkCanCallNotificationApi(callingPackage);
|
|
int userId = getCallingUserId();
|
|
+ if (component.flattenToString().length() > MAX_CN_LENGTH) {
|
|
+ throw new IllegalArgumentException("Component name is too long.");
|
|
+ }
|
|
final long identity = Binder.clearCallingIdentity();
|
|
try {
|
|
return PendingIntent.getActivity(getContext(),
|