Merge "Defuse Bundles parsed by the system process." into nyc-dev am: c4b0ade

am: a0f6318

* commit 'a0f6318f44244ec4e916d3abecf157beb4fefc8c':
  Defuse Bundles parsed by the system process.
This commit is contained in:
Jeff Sharkey
2016-03-17 18:54:28 +00:00
committed by android-build-merger
14 changed files with 207 additions and 54 deletions

View File

@ -207,6 +207,10 @@ public class SettingsProvider extends ContentProvider {
@Override
public Bundle call(String method, String name, Bundle args) {
// If the remote side sent us bad parcelables, they won't get the
// results they want, which is their loss.
if (args != null) args.setDefusable(true);
final int requestingUserId = getRequestingUserId(args);
switch (method) {
case Settings.CALL_METHOD_GET_GLOBAL: {