Merge "Defuse Bundles parsed by the system process." into nyc-dev am: c4b0ade
am: a0f6318
* commit 'a0f6318f44244ec4e916d3abecf157beb4fefc8c':
Defuse Bundles parsed by the system process.
This commit is contained in:
@ -207,6 +207,10 @@ public class SettingsProvider extends ContentProvider {
|
||||
|
||||
@Override
|
||||
public Bundle call(String method, String name, Bundle args) {
|
||||
// If the remote side sent us bad parcelables, they won't get the
|
||||
// results they want, which is their loss.
|
||||
if (args != null) args.setDefusable(true);
|
||||
|
||||
final int requestingUserId = getRequestingUserId(args);
|
||||
switch (method) {
|
||||
case Settings.CALL_METHOD_GET_GLOBAL: {
|
||||
|
Reference in New Issue
Block a user