tree c242a8e663db397961c9c04e14c3fc64a95e4791
parent d8b4a6c6f9a9166c75824690aa81834af8761577
author Ajay Panicker <apanicke@google.com> 1491947140 -0700
committer gitbuildkicker <android-build@google.com> 1492625969 -0700

Prevent OPP from opening files that aren't sent over Bluetooth

Before this patch an app could send an open intent to
BluetoothOppTransferService using a fake content provider to gain external
read and write access. We fix this by checking the Uri of the file before
opening it to see if it originated from the Bluetooth Share content provider.
We also stop graning write access to apps that we use to view the file.

Bug: 35385327
Test: PoC found in bug
Change-Id: Iad85490a0306b3e70767285393b204be22b11511
(cherry picked from commit f20350af42cd5cce1a762ef587ee50fef696f0f0)