)]}'
{
  "commit": "bac46f5b6581a55fa50e473ca09018bd2bdd59a9",
  "tree": "c0fbefbc38822ca0013c73f9939202859e75addd",
  "parents": [
    "4ffe72dcc8e36013c22131920c05af7c573638ce"
  ],
  "author": {
    "name": "Jeff Sharkey",
    "email": "jsharkey@android.com",
    "time": "Mon Nov 21 10:33:54 2016 -0700"
  },
  "committer": {
    "name": "Jeff Sharkey",
    "email": "jsharkey@google.com",
    "time": "Thu Feb 02 07:12:20 2017 +0000"
  },
  "message": "DO NOT MERGE. No direct Uri grants from system.\n\nThe system should never be extending Uri permission grants from\nitself, since it automatically holds all the permissions.  Instead,\nthe system should always be a mediator between two specific app, and\nit should be using startActivityAsCaller() if it needs to extend\npermissions.\n\nBlocking at this level fixes an entire class of confused deputy\nsecurity issues.\n\nTest: builds, normal intent resolution UI works\nBug: 33019296, 32990341, 32879915, 32879772\nChange-Id: Iaa57c393a386d8068e807d0dd0caccc89d8a11db\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "beb0ee0eadb145bf5e23215c614ea7cc698f7375",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/am/ActivityManagerService.java",
      "new_id": "5bb71b4dd926bfcf1be4a6268bd0aa08776a799f",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/am/ActivityManagerService.java"
    }
  ]
}