tree 69071227ab0ac8fcf0b501d84218075a3d1fae02
parent f0db5f8dcc98fd52d153e35e41cd19d81df333df
author Hall Liu <hallliu@google.com> 1565659140 -0700
committer Max Spector <mspector@google.com> 1568852004 -0700

Fix the remaining holes for access to APN data

Add the following checks for preventing unauthorized access to the APN
username and password fields in the carrier db:
1. Check the query for sensitive fields no matter what URI is being
queried
2. Perform a case-insensitive search for sensitive fields
3. Always check the permission for accessing username/password if any
part of the query contains a subquery (detected via looking for the
"select" token).

Bug: 138802882
Test: CTS
Change-Id: I59b297642d2000dde0a83f77b20112c7382b7ef1
Merged-In: I59b297642d2000dde0a83f77b20112c7382b7ef1
(cherry picked from commit 09a82c2251fe7c79b8e06c470f3f260e3c468ea2)