Chenbo Feng d80a6ed9e2 Enforce permission check in getUidStats function ...

The NetworkStatsService.getUidStats() currently doesn't have any
permission check to make sure unpriviledged apps cannot read the stats
of a different uid. It will protentially have security problem since
apps with ACCESS_NETWORK_STATS permission can directly calling into
NetworkStatsService and bypass the check in TrafficStats. Move the uid
check from TrafficStats to NetworkStatsService to fix the problem.

Bug: 129151407
Test: atest AppSecurityTests#testAppFailAccessPrivateData_full
Test: atest AppSecurityTests#testAppFailAccessPrivateData_instant
Test: atest android.app.usage.cts.NetworkUsageStatsTest
Test: atest NetworkStatsBinderTest

Change-Id: Iae85676cfe5f114da69ec278afc2c904bc907234

2020-04-27 18:38:56 +08:00

core/java

Enforce permission check in getUidStats function

2020-04-27 18:38:56 +08:00

packages/Tethering/src/android/net/util

Fix some @hide usage in Tethering

2020-01-07 21:29:52 +08:00

services

Enforce permission check in getUidStats function

2020-04-27 18:38:56 +08:00

wifi/java/android/net/wifi/p2p

[P2P] Add binder to service calls

2017-06-06 17:23:44 +00:00

Description

android_packages_modules_Connectivity

189 MiB

Languages

Java 81.4%

Kotlin 7.7%

AIDL 4.5%

C++ 4.5%

C 1.7%

Other 0.1%