Photo Picker Dialog: Use sandboxed utility process for decoding images.

chrome/android/java/AndroidManifest.xml

Index: chrome/android/java/AndroidManifest.xml
diff --git a/chrome/android/java/AndroidManifest.xml b/chrome/android/java/AndroidManifest.xml
index a528f07bc9a6239efcf79793098e918a2eeffe01..52d3da2afb896b6c4d080525cb831533463b56ce 100644
--- a/chrome/android/java/AndroidManifest.xml
+++ b/chrome/android/java/AndroidManifest.xml
@@ -667,6 +667,13 @@ by a child template that "extends" this file.
             android:exported="false">
         </service>
 
+        <!-- Service for decoding images in a sandboxed process. -->
+        <service
+            android:description="@string/decoder_description"
+            android:name="org.chromium.chrome.browser.photo_picker.DecoderService"
+            android:isolatedProcess="true"
+            android:process=":decoder_service" />

[Theresa, 2017/04/13 02:25:26]

This should have android:exported="false" so that external apps cannot access
it.

[Finnur, 2017/04/18 17:21:14]

Excellent catch! Done.

+
         <!-- Providers for chrome data. -->
         <provider android:name="org.chromium.chrome.browser.provider.ChromeBrowserProvider"
             android:authorities="{{ manifest_package }}.ChromeBrowserProvider;{{ manifest_package }}.browser;{{ manifest_package }}"