diff --git a/app/lint.xml b/app/lint.xml index 382ff38f8..1cc9091e5 100644 --- a/app/lint.xml +++ b/app/lint.xml @@ -24,6 +24,7 @@ + diff --git a/app/src/main/java/org/fdroid/fdroid/data/InstalledAppProviderService.java b/app/src/main/java/org/fdroid/fdroid/data/InstalledAppProviderService.java index 2afc56f75..9915bf9e1 100644 --- a/app/src/main/java/org/fdroid/fdroid/data/InstalledAppProviderService.java +++ b/app/src/main/java/org/fdroid/fdroid/data/InstalledAppProviderService.java @@ -273,7 +273,13 @@ public class InstalledAppProviderService extends JobIntentService { *

* Can still return null, as there is potentially race conditions to do with uninstalling apps * such that querying the {@link PackageManager} for a given package may throw an exception. + *

+ * The {@code PackageManagerGetSignatures} lint check is not relevant here since this is doing + * nothing related to verifying the signature. The APK signatures are just processed to + * produce the unique ID of the signer to determine compatibility. This {@code Service} does + * nothing related to checking valid APK signatures. */ + @SuppressWarnings("PackageManagerGetSignatures") @Nullable private PackageInfo getPackageInfo(Intent intent, String packageName) { PackageInfo packageInfo = intent.getParcelableExtra(EXTRA_PACKAGE_INFO);