summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJim Miller <jaggies@google.com>2016-04-13 16:35:36 -0700
committerThe Android Automerger <android-build@google.com>2016-06-01 16:10:14 -0700
commit4e241229b21123eb0839e678e5b4eb87b8650ea5 (patch)
treef2e6347bb3763ba5a3735ccad6d4c9e378795870
parent6ffe14035cf14e5d1a5f78e62f5e70ed2bb996e3 (diff)
downloadbase-4e241229b21123eb0839e678e5b4eb87b8650ea5.tar.gz
Fix missing permission check when saving pattern/password
Fixes bug 28163930 Change-Id: Ic98ef20933b352159b88fdef331e83e9ef6e1f20 (cherry picked from commit b5383455b6cae093e60684b4f5cccb0cc440330d)
-rw-r--r--services/core/java/com/android/server/LockSettingsService.java2
1 files changed, 2 insertions, 0 deletions
diff --git a/services/core/java/com/android/server/LockSettingsService.java b/services/core/java/com/android/server/LockSettingsService.java
index f1d7da4ee629..55682c2c7e3d 100644
--- a/services/core/java/com/android/server/LockSettingsService.java
+++ b/services/core/java/com/android/server/LockSettingsService.java
@@ -424,6 +424,7 @@ public class LockSettingsService extends ILockSettings.Stub {
@Override
public void setLockPattern(String pattern, String savedCredential, int userId)
throws RemoteException {
+ checkWritePermission(userId);
byte[] currentHandle = getCurrentHandle(userId);
if (pattern == null) {
@@ -452,6 +453,7 @@ public class LockSettingsService extends ILockSettings.Stub {
@Override
public void setLockPassword(String password, String savedCredential, int userId)
throws RemoteException {
+ checkWritePermission(userId);
byte[] currentHandle = getCurrentHandle(userId);
if (password == null) {