tree 039742f44835b8d7eae0f12cc90d1422da8798d8
parent 08c3183dea05d6f0e7a1868215bbfde15a723c00
author Grace Jia <xiaotonj@google.com> 1663881657 -0700
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1668476998 +0000

Fix security vulnerability when register phone accounts.

Currently if the registered self-managed phone account updated to a call
provider phone account, the enable state will be directly copied to the
updated one so that malicious app can perform call spoofing attack
without any permission requirements. Fix this by disallowing change a
self-managed phone account to a managed phone account.

Bug: 246930197
Test: CtsTelecomTestCases:SelfManagedConnectionSreviceTest
Change-Id: I8f7984cd491632b3219133044438b82ca4dec80e
Merged-In: I8f7984cd491632b3219133044438b82ca4dec80e
(cherry picked from commit ce3216cbde1a2f0a7912f027aeb0c30316613116)
Merged-In: I8f7984cd491632b3219133044438b82ca4dec80e