[core] Verify apk signature (#1035)

This commit is contained in:
vvb2060 2021-09-01 21:16:13 +08:00 committed by GitHub
parent 5c04cd85f3
commit 8f5f2d224d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions

View File

@ -298,6 +298,11 @@ public class PackageService {
uninstallPackage(new VersionedPackage(pkgInfo.packageName, pkgInfo.versionCode), -1);
}
if (!InstallerVerifier.verifyInstallerSignature(apkFile.getPath())) {
Log.w(TAG, apkFile + " verify signature false! skip install.");
return false;
}
// Install manager
IPackageInstaller installerService = pm.getPackageInstaller();
PackageInstaller installer = null;