From 8f5f2d224d51c2fd921a6d8004c70fa3c3ea35bb Mon Sep 17 00:00:00 2001
From: vvb2060 <vvb2060@gmail.com>
Date: Wed, 1 Sep 2021 21:16:13 +0800
Subject: [PATCH] [core] Verify apk signature (#1035)

---
 .../main/java/org/lsposed/lspd/service/PackageService.java   | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/core/src/main/java/org/lsposed/lspd/service/PackageService.java b/core/src/main/java/org/lsposed/lspd/service/PackageService.java
index a8bc0c3e..a3417c7b 100644
--- a/core/src/main/java/org/lsposed/lspd/service/PackageService.java
+++ b/core/src/main/java/org/lsposed/lspd/service/PackageService.java
@@ -298,6 +298,11 @@ public class PackageService {
                     uninstallPackage(new VersionedPackage(pkgInfo.packageName, pkgInfo.versionCode), -1);
             }
 
+            if (!InstallerVerifier.verifyInstallerSignature(apkFile.getPath())) {
+                Log.w(TAG, apkFile + " verify signature false! skip install.");
+                return false;
+            }
+
             // Install manager
             IPackageInstaller installerService = pm.getPackageInstaller();
             PackageInstaller installer = null;