commit | 496a621a1e57967f995fca3b8ba20305f8d229f4 | [log] [tgz] |
---|---|---|
author | Chiao Cheng <chiaocheng@google.com> | Mon Jul 08 17:56:47 2013 -0700 |
committer | The Android Automerger <android-build@android.com> | Wed Jul 10 18:28:05 2013 -0700 |
tree | c20200657fe43a9667017385e7d8f872bc4edbc5 | |
parent | 3f88ff6b537fb53806f126b4aea3355686387717 [diff] |
White list file names and do not allow ".." Fixes security vulnerability where application can pass in relative file paths with ".." in the string to access files outside of the dumpedfiles directory. Bug: 9607306 Change-Id: Iad219cb48fa560d837498c2dc75127294dcf401b