| commit | 561e28af0c3baf6c25c42f7383411bee79139f41 | [log] [tgz] |
|---|---|---|
| author | Aishwarya Mallampati <amallampati@google.com> | Wed Aug 10 17:26:42 2022 +0000 |
| committer | Aishwarya Mallampati <amallampati@google.com> | Fri Aug 19 22:13:33 2022 +0000 |
| tree | 10b27d5284a8dbadbe6fd15d1f18a5c92b17c1d5 | |
| parent | 951b31a4a43d47c8a757ea89a4bb9bf307c180d9 [diff] |
Check msg_id and thread_type value before
concatenating.
msg_id and thread_type parameters are used for sql injection in MmsSmsProvider#query.
This is solved by checking the value of msg_id and thread_type before concetenating it
to extraSelection.
Bug: 224770183, 224770203
Test: atest android.telephonyprovider.cts.SmsTest,
atest CtsTelephonyTestCases
Sanity check - sending and receiving sms and mms manually
Change-Id: I36706a89bd4cfeefc26ee09496086a6efe3169f4