tree 0cb3fc3ebb0bc8a997259eb1d0ac2f26cba95de1
parent e9b7e3a6b7a8886693d298401a20788816a5afdc
author Tom Taylor <tomtaylor@google.com> 1480984795 -0800
committer gitbuildkicker <android-build@google.com> 1482187291 -0800

32807795  Security Vulnerability - AOSP Messaging App: thirdparty can
attach private files from "/data/data/com.android.messaging/"
directory to the messaging app.

* This is a manual merge from ag/871758 -- backporting a security fix from
Bugle to Kazoo.
* Don't export the MediaScratchFileProvider or the MmsFileProvider. This
will block external access from third party apps. In addition, make both
providers more robust in handling path names. Make sure the file paths
handled in the providers point to the expected directory.

Change-Id: I9e6b3ae0e122e3f5022243418f2893d4a0859edb
Fixes: 32807795
(cherry picked from commit a2aa53f83afbd13b04cbdcca494fd3cf659c155d)