OVERVIEW

Androidx ProfileInstaller library has an implementation bug that can trigger a NullPointerException. Specifically, sending an Intent action androidx.profileinstaller.action.SKIP_FILE without any extras triggers the issue.

STEPS TO REPRODUCE

1. Install an app using ProfileInstaller
2. Replacing ${PACKAGE_NAME} with the correct application package name, run the following ADB command: adb shell am broadcast -a androidx.profileinstaller.action.SKIP_FILE -n ${PACKAGE_NAME}/androidx.profileinstaller.ProfileInstallReceiver

RESULTS

Actual: App crashes

Caused by java.lang.NullPointerException: Attempt to invoke virtual method 'java.lang.String android.os.Bundle.getString(java.lang.String)' on a null object reference
       at androidx.profileinstaller.ProfileInstallReceiver.onReceive(ProfileInstallReceiver.java:75)
       at android.app.ActivityThread.handleReceiver(ActivityThread.java:3187)
       at android.app.ActivityThread.-wrap17(ActivityThread.java)
       at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1672)
       at android.os.Handler.dispatchMessage(Handler.java:106)
       at android.os.Looper.loop(Looper.java:164)
       at android.app.ActivityThread.main(ActivityThread.java:6494)
       at java.lang.reflect.Method.invoke(Method.java)
       at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:438)
       at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:807)

Expected: App shouldn't crash

NOTES

The issue is caused by the Intent extras being null. A null check of the extras is needed.

See https://cs.android.com/androidx/platform/frameworks/support/+/androidx-main:profileinstaller/profileinstaller/src/main/java/androidx/profileinstaller/ProfileInstallReceiver.java;l=74

Component used: ProfileInstaller Version used: 1.2 Devices/Android versions reproduced on: Nexus 5 Android 7, Pixel 6 Android 13