32807795 Security Vulnerability - AOSP Messaging App: thirdparty can attach private files from "/data/data/com.android.messaging/" directory to the messaging app. am: a2aa53f83a am: 90bf70396d am: 305a004e19

am: 2397f2fbef

Change-Id: I16b590f76c9856d1407b336973ba86ff681415c6
This commit is contained in:
Tom Taylor
2016-12-06 22:24:07 +00:00
committed by android-build-merger
3 changed files with 39 additions and 4 deletions
+4 -2
View File
@@ -317,11 +317,13 @@
<provider android:name=".datamodel.MmsFileProvider"
android:authorities="com.android.messaging.datamodel.MmsFileProvider"
android:grantUriPermissions="true" />
android:grantUriPermissions="true"
android:exported="false" />
<provider android:name=".datamodel.MediaScratchFileProvider"
android:authorities="com.android.messaging.datamodel.MediaScratchFileProvider"
android:grantUriPermissions="true" />
android:grantUriPermissions="true"
android:exported="false" />
<!-- Action Services -->