Merge "Flush the auth token table on resetUid"

keystore/auth_token_table.cpp

@@ -140,6 +140,10 @@ void AuthTokenTable::RemoveEntriesSupersededBy(const Entry& entry) {
                    entries_.end());
 }
 
+void AuthTokenTable::Clear() {
+    entries_.clear();
+}
+
 bool AuthTokenTable::IsSupersededBySomeEntry(const Entry& entry) {
     return std::any_of(entries_.begin(), entries_.end(),
                        [&](Entry& e) { return e.Supersedes(entry); });

keystore/auth_token_table.h

@@ -95,6 +95,8 @@ class AuthTokenTable {
      */
     void MarkCompleted(const keymaster_operation_handle_t op_handle);
 
+    void Clear();
+
     size_t size() { return entries_.size(); }
 
   private:

keystore/keystore.cpp

@@ -2245,6 +2245,9 @@ public:
         if (!checkBinderPermission(P_RESET_UID, targetUid)) {
             return ::PERMISSION_DENIED;
         }
+        // Flush the auth token table to prevent stale tokens from sticking
+        // around.
+        mAuthTokenTable.Clear();
 
         return mKeyStore->reset(targetUid) ? ::NO_ERROR : ::SYSTEM_ERROR;
     }