Skip to content

Commit e83f0f6

Browse files
Jim MillerThe Android Automerger
authored andcommitted
Fix missing permission check when saving pattern/password
Fixes bug 28163930 Change-Id: Ic98ef20933b352159b88fdef331e83e9ef6e1f20
1 parent 9878bb9 commit e83f0f6

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

services/core/java/com/android/server/LockSettingsService.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -424,6 +424,7 @@ private byte[] getCurrentHandle(int userId) {
424424
@Override
425425
public void setLockPattern(String pattern, String savedCredential, int userId)
426426
throws RemoteException {
427+
checkWritePermission(userId);
427428
byte[] currentHandle = getCurrentHandle(userId);
428429

429430
if (pattern == null) {
@@ -452,6 +453,7 @@ public void setLockPattern(String pattern, String savedCredential, int userId)
452453
@Override
453454
public void setLockPassword(String password, String savedCredential, int userId)
454455
throws RemoteException {
456+
checkWritePermission(userId);
455457
byte[] currentHandle = getCurrentHandle(userId);
456458

457459
if (password == null) {

0 commit comments

Comments
 (0)