We've been informed it's possible for an app to create a world
readable hardlink in L in its own /data directory that links to
another apps private data, including Messenger data. The hardlink
bypassed our existing checks. So now we simply refuse all file: uris
in the /data/ directory.
Other apps shouldn't be sending file uris anyway, and we dont know
of any that send file:///data/ uris.
Bug: 28793303
Change-Id: I778bb2bcb9e11185357093c59fc1fa3f6caa26a1
am: ca5fc9fa7d
* commit 'ca5fc9fa7dbba6cbab625d4a80f812b7206f0676':
Messaging doesn't allow sharing of its own files
Change-Id: Ice1aa04a938f9ff14ac3b321344c34bfd152b1dc
am: c4073ff4ce
* commit 'c4073ff4ce1a342daad01a99d3fce84c54bc4776':
Add badge icon for work contact in search result
Change-Id: I8a9556c786697c69af468c62a7d5a658ba87100d
am: 9045160771
* commit '904516077182cce4ce71a51b27a3ab418ed0f225':
Separate work and personal contacts search result
Change-Id: I302cac2ded10c1945fb708996809a15cc8cebd28
am: b7fc988f23
* commit 'b7fc988f231394077c08b5ede4d1a7310da57406':
Search enterprise directory as well in SMS app
Change-Id: Ie22b0b974985251ce6fd34c57b8316e9529a1057
1. Remove isWorkProfileSupported checking, api level checking is enough.
2. Replace the hardcoded uri with the corresponding api.
BUG=26797244
BUG=28016344
(cherry picked from commit 0d7a1cce157e4ffb26d5fefb9908bbeffcb1d03c)
Change-Id: I76edad19dc6a19aa77b523cb960f716fca08944d
This change allows sms app to show search result of different directories
in different partitions.
Currently, only personal default and enterprise default directory are
searched.
BUG=26021888
BUG=28016344
(cherry picked from commit 59666b32c192bd28807ccd2f9153c796668bdf13)
Change-Id: I733ceaae806d13661861126ce61c34108ac7e662
TODO: Update the UI to show enterprise result separately (b/26021888)
Bug: 28016344, 25977180
(cherry picked from commit 5c621e57256f5068a43f1456f9bab1194f0d27b2)
Change-Id: I7130ae5e057ed750a29f64c5497a04b868613579
-Previously, Messaging allowed sharing of any file it had permission
to reach. This meant that bad apps could share a link to
file:///data/data/com.android.messaging/databases/bugle_db
and Messaging would happily send all this sensitive information to
the target. Worse, a bad app could share a softlink to this file,
where the symlink was picture.jpg with the image/jpg type.
-Now, when sanitizing attachments, we make sure any filepaths don't
lead to any Bugle-specific directories.
-getApplicationInfo().dataDir is a symlink to
/data/data/com.android.messaging, and appears to be the
only directory where we store personal data.
-Most apps share as contentUris, including Messaging, so Messaging
can still share to itself.
Change-Id: Ic464bc1f099029a030793c478aaf88b957d8bad1
Fixes:28076752
am: aa7dc68
* commit 'aa7dc685efb6ce80633b88d30f3b788a2c849452':
Let Messaging dex depend on proguard flag file
Change-Id: I94d0d52cd46a8d77d00619b79d00fd21eea22982
am: fc922a1
* commit 'fc922a1f53193535d16cdb6c50d24bb1ad862229':
Match the minimum version in the manifest.
Change-Id: Ia21710004fd08a0c57c77301045c910fe27c5353
There is a bug in the current version of Jack
that causes problems when the default is changed to
1.8. Pinning to 1.7 appears to help.
Bug: 27305482
Bug: 26753820
(cherry picked from commit 445d7baabc)
Change-Id: I178ef57bc29cb49064db08d06d501d6aed09c26f
There is a bug in the current version of Jack
that causes problems when the default is changed to
1.8. Pinning to 1.7 appears to help.
Bug: 27305482
Bug: 26753820
Change-Id: Ia29bf5cb14c754be4c4b453aa89a9d9c369d9e52
Jack was disabled because of bugs in Jack and missing support for testing
obfuscated applications. Both are now fixed so Jack can be enabled.
Bug: 27215871
(cherry picked from commit bf6bd40faa)
Change-Id: I73d3c5a3599640932b2305ffe22bb5ef27814ba3
Jack was disabled because of bugs in Jack and missing support for testing
obfuscated applications. Both are now fixed so Jack can be enabled.
Bug: 27215871
Change-Id: I7c437906fe78e1a97204f5e26059966198b15ac1
We're removing differences between two builds that have the same source.
These builds will have different BUILD_NUMBERs though, so it shouldn't
be embedded in the binary.
For eng builds, using the current date forces the APK to be rebuilt
every time the makefiles are read. Remove this for platform builds, but
keep it if building unbundled.
Bug: 24201956
Change-Id: I8c0ad93e817c74c69b8d8156d4727952b08024d4
