1556629 - Not able to Accessing Firefox content provider in android for History & Bookmarks

Status: RESOLVED WONTFIX

(Firefox for Android Graveyard :: General, defect)

Description

[Chiranjeevi]

Attachment: Firefox_History_Bookmarks_Issue.txt

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36

Steps to reproduce:

Trying to get Firefox History & BookMarks using below URI

1. "content://org.mozilla.firefox.db.browser/history" ,
2. "content://org.mozilla.firefox.db.browser/bookmarks"

Using Content Resolver to get the Firefox History & BookMarks from Firefox.

Actual results:

Unable to get Firefox History & BookMarks using below URI

1. "content://org.mozilla.firefox.db.browser/history" ,
2. "content://org.mozilla.firefox.db.browser/bookmarks"

we are getting below issue
Permission Denial: opening provider org.mozilla.gecko.db.BrowserProvider from ProcessRecord{523715e 18545:com.mcafee.android.sample/u0a350} (pid=18545, uid=10350) that is not exported from uid 10198.

Expected results:

We need Firefox Browser History & Bookmarks.

Comment 1

[Petru-Mugurel Lingurar [:petru]]

This would be a big security issue.
Providers are not exported anymore following bug 1229681 and https://nvd.nist.gov/vuln/detail/CVE-2016-2810.