Use a copy of lock screen secret in recoverablekeystore.
LockscreenCredential removes secret from memory. KeySyncTask.run is delayed and has risk of using array with all zeros. Bug: 159914786 Test: atest com.google.android.gts.recoverablekeystore Test: atest com.android.server.locksettings.recoverablekeystore Change-Id: I0ed183eb3a30c16db77cb12b2347794796dd88d8 Merged-In: I0ed183eb3a30c16db77cb12b2347794796dd88d8 (cherry picked from commit 07b312c8)
Showing
- services/core/java/com/android/server/locksettings/recoverablekeystore/KeySyncTask.java 6 additions, 2 deletions.../server/locksettings/recoverablekeystore/KeySyncTask.java
- services/tests/servicestests/src/com/android/server/locksettings/recoverablekeystore/KeySyncTaskTest.java 61 additions, 4 deletions...ver/locksettings/recoverablekeystore/KeySyncTaskTest.java
Loading
Please register or sign in to comment