tree 2cb24339bd8414d5662606bfa9b78edcd195b029
parent 8cd5b401b62f25e922cc0f2ee505b2ee86d5074d
author Rohan Shah <shahrk@google.com> 1471458206 -0700
committer Feng Yu <feny@google.com> 1471926907 +0000

Limit account id and id to longs

The security issue occurs because id is allowed to be an arbitrary
path instead of being limited to what it is -- a long. Both id
and account id are now parsed into longs (and if either fails, an
error will be logged and null will be returned).

Tested/verified error is logged using the reported attack.

BUG=30745403

Change-Id: Ia21418545bbaeb96fb5ab6c3f4e71858e57b8684
(cherry picked from commit 9794d7e8216138adf143a3b6faf3d5683316a662)