#19901
89%

Ran 10 Jul 2025 09:25PM UTC

Jobs 1

Files 615

Run time 3min

Badge

Embed ▾

Committed 10 Jul 2025 09:14PM UTC coverage: 88.527% (+0.007%) from 88.52%

Build # #19901

Build Type

push

github

Committed by

web-flow

Commit Message

binder: Introduce server pre-authorization (#12127)

grpc-binder clients authorize servers by checking the UID of the sender of the SETUP_TRANSPORT Binder transaction against some SecurityPolicy. But merely binding to an unauthorized server to learn its UID can enable "keep-alive" and "background activity launch" abuse, even if security policy ultimately decides the connection is unauthorized. Pre-authorization mitigates this kind of abuse by looking up and authorizing a candidate server Application's UID before binding to it. Pre-auth is especially important when the server's address is not fixed in advance but discovered by PackageManager lookup.

Run Details

34646 of 39136 relevant lines covered (88.53%)

0.89 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	77.08	-1.04%	../servlet/src/main/java/io/grpc/servlet/AsyncServletOutputStreamWriter.java
1	93.33	-0.48%	../xds/src/main/java/io/grpc/xds/client/ControlPlaneClient.java

Jobs

ID	Job ID	Ran	Files	Coverage
1	#19901.1	10 Jul 2025 09:25PM UTC	615	88.53

grpc / grpc-java / #19901
89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build #19901

grpc / grpc-java / #19901 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build #19901

grpc / grpc-java / #19901
89%

README BADGES
x