| commit | 40f616b1f654822b3ac7c13853212c63d91312d5 | [log] [tgz] |
|---|---|---|
| author | Craig Mautner <cmautner@google.com> | Tue Feb 17 10:17:21 2015 -0800 |
| committer | Craig Mautner <cmautner@google.com> | Thu Feb 19 09:44:53 2015 -0800 |
| tree | ad6bffbb77e21db89a97e2663606a40a6e63fa6f | |
| parent | 14bb9188bfd001bbb96749e51b8d5edc242c89e7 [diff] |
Do not make ActivityContainer available to apps. DO NOT MERGE A security leak was discovered whereby a malicious app could get the IActivityContainer object from one app and use it to inject events into another app. This fix removes the availability of the IActivityContainer and replaces its one use with a method for returning the information the IActivityContainer was used for. Fixes bug 19394591. Change-Id: Ib3cec25b25130cd8e098892c057742cfd575cfdd