| commit | 9ea1568b6a1628f0598bbe9fd21f59fd18b0ebdf | [log] [tgz] |
|---|---|---|
| author | Sergey Nikolaienkov <sergeynv@google.com> | Tue Mar 28 12:22:31 2023 +0200 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Thu Aug 10 17:12:53 2023 +0000 |
| tree | f38b57bd90b0758797a0e2ad3917c58d9415e2c6 | |
| parent | c9ed202ea4eb765f7bc228e662d517dd4dfec560 [diff] |
Fix path traversal vulnerabilities in MediaProvider Canonicalize filepath provided by the caller when hanling SCAN_FILE_CALL method call in MediaProvider. Additionally, make sure to check access permission in SCAN_FILE_CALL (using enforceCallingPermissionInternal()). Preemptively canonicalize Files provided as an arguments to the public API methods in ModernMediaScanner (scanFile(), scanDirectory() and onDirectoryDirty()) to prevent path traversal attacks. Bug: 262244882 Test: atest MediaProviderTests (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c934d394d3dfa56ad9bb41faeb0b49001785f0fe) Merged-In: I61e77d69ae857984b819fa0ea27bec5c26a34842 Change-Id: I61e77d69ae857984b819fa0ea27bec5c26a34842