Check UID in getUiccCardsInfoSecurity
To avoid the case where a caller calls PhoneInterfaceManager#getUiccCardsInfoSecurity using reflection and supplies a calling package with privilege which isn't their own package, we confirm that the calling package UID matches the supplied package. Bug: 146570216 Test: atest com.android.phone.PhoneInterfaceManagerTest Change-Id: Id08009f2feb281c20aaad55aa89faae66b709f88 Merged-In: Id08009f2feb281c20aaad55aa89faae66b709f88 (cherry picked from commit 102b27765aadb26935faa9b89bb0c784d019fd18)
Loading
Please sign in to comment