| commit | 10aaf9ae5b6e30d20de62ecaa6df5b790f1b13bc | [log] [tgz] |
|---|---|---|
| author | Yi-an Chen <theianchen@google.com> | Tue Apr 23 21:17:44 2024 +0000 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Wed May 08 21:06:20 2024 +0000 |
| tree | 1726670576b3c7ce2a55b485ad09468f35b37535 | |
| parent | d6271c284c8ba301c97018baf65f4195d2a298aa [diff] |
Fix security vulnerability of non-dynamic permission removal The original removePermission() code in PermissionManagerServiceImpl missed a logical negation operator when handling non-dynamic permissions, causing both testPermissionPermission_nonDynamicPermission_permissionUnchanged and testRemovePermission_dynamicPermission_permissionRemoved tests in DynamicPermissionsTest to fail. The corresponding test DynamicPermissionsTest is also updated in the other CL: ag/27073864 Bug: 321711213 Test: DynamicPermissionsTest on sc-dev and tm-dev locally (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0ead58f69f5de82b00406316b333366d556239f1) Merged-In: Ia146d4098643d9c473f8c83d33a8a125a53101fc Change-Id: Ia146d4098643d9c473f8c83d33a8a125a53101fc