Closed Bug 1289384 Opened 8 years ago Closed 3 years ago

Consider calling setInstallerPackageName() from UpdateService

Categories

(Firefox for Android Graveyard :: General, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: sebastian, Unassigned)

References

Details

Our UpdateService could/should call setInstallerPackageName():

* So that we know that this app is getting updated from our installer; We are starting to read this value in bug 1220773.
* So that no other app can claim to be the installer (See docs).

However the docs say:

> A SecurityException will be thrown if targetPackage already has an installer
> package, and that installer package is not signed with the same certificate as
> the calling application. 

If we set this value and then update the app from Google Play: Does this mean Google Play can't update the installer string and it will remain set to our updater (Something we probably do not want because of bug 1220773).

https://developer.android.com/reference/android/content/pm/PackageManager.html#setInstallerPackageName(java.lang.String,%20java.lang.String)
We have completed our launch of our new Firefox on Android. The development of the new versions use GitHub for issue tracking. If the bug report still reproduces in a current version of [Firefox on Android nightly](https://play.google.com/store/apps/details?id=org.mozilla.fenix) an issue can be reported at the [Fenix GitHub project](https://github.com/mozilla-mobile/fenix/). If you want to discuss your report please use [Mozilla's chat](https://wiki.mozilla.org/Matrix#Connect_to_Matrix) server https://chat.mozilla.org and join the [#fenix](https://chat.mozilla.org/#/room/#fenix:mozilla.org) channel.
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → INCOMPLETE
Product: Firefox for Android → Firefox for Android Graveyard
You need to log in before you can comment on or make changes to this bug.