com.android.cts.appsecurity.AppSecurityTests#testAppFailAccessPrivateData fail

最新推荐文章于 2024-08-20 14:40:31 发布

原创最新推荐文章于 2024-08-20 14:40:31 发布 · 3.4k 阅读

1 ·

CC 4.0 BY-SA版权

Android CTS测试专栏收录该内容

16 篇文章

订阅专栏

本文介绍了一个安卓应用安全测试案例的失败情况，该测试检查应用程序是否能够非法访问其他应用的详细流量统计数据。文章提供了测试失败的具体错误信息，并指出该问题在6.0r8版本通过，但在6.0r9版本中失败。文章还提到了修复此问题所需的Google补丁及内核文件修改。

com.android.cts.appsecurity.AppSecurityTests
–testAppFailAccessPrivateData fail

java.lang.AssertionError: on-device tests failed:
com.android.cts.appaccessdata.AccessPrivateDataTest#testAccessPrivateData:
junit.framework.AssertionFailedError: Other apps detailed traffic stats leaked
at junit.framework.Assert.fail(Assert.java:50)
at com.android.cts.appaccessdata.AccessPrivateDataTest.accessPrivateTrafficStats(AccessPrivateDataTest.java:113)
at com.android.cts.appaccessdata.AccessPrivateDataTest.testAccessPrivateData(AccessPrivateDataTest.java:70)

此case在6.0r8pass,在6.0r9fail，需要合入Google Patch：
https://android.googlesource.com/kernel/msm/+/14d533d17af0ab150440d6431414680b36105783%5E%21/#F0
修改：kernel/net/netfilter/xt_qtaguid.c

@@ -2521,7 +2521,7 @@
    uid_t stat_uid = get_uid_from_tag(tag);
    struct proc_print_info *ppi = m->private;
    /* Detailed tags are not available to everybody */
-   if (get_atag_from_tag(tag) && !can_read_other_uid_stats(stat_uid)) {
+   if (!can_read_other_uid_stats(stat_uid)) {
        CT_DEBUG("qtaguid: stats line: "
             "%s 0x%llx %u: insufficient priv "
             "from pid=%u tgid=%u uid=%u stats.gid=%u\n",
@@ -1923,7 +1923,7 @@
            );
        f_count = atomic_long_read(
            &sock_tag_entry->socket->file->f_count);
-       seq_printf(m, "sock=%p tag=0x%llx (uid=%u) pid=%u "
+       seq_printf(m, "sock=%pK tag=0x%llx (uid=%u) pid=%u "
               "f_count=%lu\n",
               sock_tag_entry->sk,
               sock_tag_entry->tag, uid,