Add uid checking logic for aul_app_get_appid_bypid_for_uid() 81/317581/2 tizen_6.0
authorChanggyu Choi <changyu.choi@samsung.com>
Fri, 3 Jan 2025 09:39:59 +0000 (18:39 +0900)
committerChanggyu Choi <changyu.choi@samsung.com>
Fri, 3 Jan 2025 09:48:40 +0000 (18:48 +0900)
This patch prevents non-Tizen application from querying itself.

Change-Id: Ibc6c1e96802f9071f222127e114c073956eba7ac
Signed-off-by: Changgyu Choi <changyu.choi@samsung.com>
src/pkginfo.c

index 50b376ff98462ad6fb10c42221ad224cb0d902e3..a5a76c53678208e602cd27fa595e96ecb8b86f9c 100644 (file)
@@ -295,6 +295,11 @@ API int aul_app_get_appid_bypid_for_uid(int pid, char *appid, int len,
                        snprintf(appid, len, "%s", preinit_appid);
                        return AUL_R_OK;
                }
+
+               if (getuid() < REGULAR_UID_MIN) {
+                       _E("pid(%d) is not an application", getpid());
+                       return AUL_R_ERROR;
+               }
        }
 
        b = bundle_create();