637e05ee0f5077f2cda8f0defaf29baeb251ad75 - SHIFTPHONES/android_frameworks_base

commit	637e05ee0f5077f2cda8f0defaf29baeb251ad75	[log] [tgz]
author	Felipe Leme <felipeal@google.com>	Wed Dec 06 12:09:37 2017 -0800
committer	Felipe Leme <felipeal@google.com>	Wed Dec 06 16:58:13 2017 -0800
tree	3859db1b2445b2a388004187ab44dca601765554
parent	6798bc300e311c633c90ff67ccff09f7bb679c21 [diff]

Further improvements when app forges package info for autofill:

- Dont create a session if the component is not owned by the calling UID.
- Log metrics for forged attempts.
- Avoid possible NPEs on AutofillManager when context or client is null.

Test: cts-tradefed run commandAndExit cts-dev -m CtsAutoFillServiceTestCases -t android.autofillservice.cts.VirtualContainerActivityTest#testAppCannotFakePackageName
Test: cts-tradefed run commandAndExit cts-dev -m CtsAutoFillServiceTestCases

Bug: 69981710

Change-Id: I9695bc046f3eb8aeecfe44f80fd0366f68b2c635

core/java/android/view/autofill/AutofillManager.java[diff]
proto/src/metrics_constants.proto[diff]
services/autofill/java/com/android/server/autofill/AutofillManagerServiceImpl.java[diff]
services/autofill/java/com/android/server/autofill/Session.java[diff]

4 files changed

tree: 3859db1b2445b2a388004187ab44dca601765554