Android CTS 7.1 Release 17 (4723909)
-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRDQNE1cO+UXoOBCWTorT+BmrEOeAUCWvnsEgAKCRDorT+BmrEO
eLYvAJ4i/2pgfEjZA7J4fe5D6unqD2NdoQCeNlfEPLb9M0lZPQ4vs3KuPnFpY8U=
=SJrC
-----END PGP SIGNATURE-----
Limit account id and id to longs

The security issue occurs because id is allowed to be an arbitrary
path instead of being limited to what it is -- a long. Both id
and account id are now parsed into longs (and if either fails, an
error will be logged and null will be returned).

Tested/verified error is logged using the reported attack.

BUG=30745403

Change-Id: Ia21418545bbaeb96fb5ab6c3f4e71858e57b8684
1 file changed