| commit | b8dfddd18d786b71388dd72f8967db037bb9b3a4 | [log] [tgz] |
|---|---|---|
| author | Zim <zezeozue@google.com> | Thu Nov 04 11:05:39 2021 +0000 |
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | Fri Dec 10 08:06:08 2021 +0000 |
| tree | 0a4b9f44756918637690f6b1ccd82cbab51b8f36 | |
| parent | fd366f58461b2348bb48e156252d68367174ba23 [diff] |
Open all files with O_NOFOLLOW. SD cards don't support symlinks, so we have no reason to try following them if somehow an evil caller is able to sneak them into the database. Bug: 124329382 Bug: 200682135 Test: atest --test-mapping packages/providers/MediaProvider Change-Id: Idb1f3ee1db90913a97a50515003f211519037066 Merged-In: Idb1f3ee1db90913a97a50515003f211519037066 (cherry picked from commit b50868065a4cf0c15e96aea66732afc89c388022) Merged-In:Idb1f3ee1db90913a97a50515003f211519037066