tree 1554435a5363eb8c07f235003aeabef981c47bc8
parent 8e6b5824dabe7a152e3b7cec256edf68d24f752e
author Pinyao Ting <pinyaoting@google.com> 1685668364 -0700
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1693569934 +0000

[RESTRICT AUTOMERGE] Fix permission issue in legacy shortcut

When building legacy shortcut, Launcher calls
PackageManager#resolveActivity to retrieve necessary permission to
launch the intent.

However, when the source app wraps an arbitrary intent within
Intent#createChooser, the existing logic will fail because launching
Chooser doesn't require additional permission.

This CL fixes the security vulnerability by performing the permission
check against the intent that is wrapped within.

Bug: 270152142
Test: manual
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:f0261b5b38cd95bc1522780a7538a5f4ddc1b119)
Merged-In: I05ccbde0a873569f24af4d3675a86830ba54c43f
Change-Id: I05ccbde0a873569f24af4d3675a86830ba54c43f