tree 9ce5b2d0f166e55bc4c608eed54c9a640eaf00ee
parent 3b99f4c14fd052de886c77e7d40e401905e792fa
author Ajay Panicker <apanicke@google.com> 1491947140 -0700
committer JP Sugarbroad <jpsugar@google.com> 1492113298 +0000

Prevent OPP from opening files that aren't sent over Bluetooth

Before this patch an app could send an open intent to
BluetoothOppTransferService using a fake content provider to gain external
read and write access. We fix this by checking the Uri of the file before
opening it to see if it originated from the Bluetooth Share content provider.
We also stop graning write access to apps that we use to view the file.

Bug: 35385327
Test: PoC found in bug
Change-Id: Iad85490a0306b3e70767285393b204be22b11511
(cherry picked from commit 23513295508cb984b81456c94210a8ade00fcf77)