Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

An application could intercept the implicit intent and pass it on to an inappropriate location, while the intent originator would remain both the intent originator and the intent recipient would remain unaware that the intent had been intercepted.

...

Code Block
bgColor#CCCCFF
TBD

Risk Assessment

Passing Failing to pass an implicit explicit intent to a pending intent could allow the intent to be misdirected, thereby leaking sensitive information and/or altering the data flow within an app.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

DRD05DRD21-J

Medium

Probable

Medium

P8

L2

Automated Detection

Automatic detection of the passing of an implicit intent to a pending intent is straightforwardA straightforward static analysis can perform reasonably well at detecting violations of this rule.

Bibliography