We've been informed it's possible for an app to create a world
readable hardlink in L in its own /data directory that links to
another apps private data, including Messenger data. The hardlink
bypassed our existing checks. So now we simply refuse all file: uris
in the /data/ directory.
Other apps shouldn't be sending file uris anyway, and we dont know
of any that send file:///data/ uris.
Bug: 28793303
Change-Id: I778bb2bcb9e11185357093c59fc1fa3f6caa26a1
am: ca5fc9fa7d
* commit 'ca5fc9fa7dbba6cbab625d4a80f812b7206f0676':
Messaging doesn't allow sharing of its own files
Change-Id: I812ae5e1b37611a69090e024a858c5813a4a155f
am: c4073ff4ce
* commit 'c4073ff4ce1a342daad01a99d3fce84c54bc4776':
Add badge icon for work contact in search result
Change-Id: Ie4a51a7aa9951de718f8ea7fe5c10f345ae5163c
am: 9045160771
* commit '904516077182cce4ce71a51b27a3ab418ed0f225':
Separate work and personal contacts search result
Change-Id: If1f5c282aca32add01002303d5f5912ae5b3aa85
am: b7fc988f23
* commit 'b7fc988f231394077c08b5ede4d1a7310da57406':
Search enterprise directory as well in SMS app
Change-Id: I8f0facc0665d9c68e1afdd49c89cc7ccd2c56515
1. Remove isWorkProfileSupported checking, api level checking is enough.
2. Replace the hardcoded uri with the corresponding api.
BUG=26797244
BUG=28016344
(cherry picked from commit 0d7a1cce157e4ffb26d5fefb9908bbeffcb1d03c)
Change-Id: I76edad19dc6a19aa77b523cb960f716fca08944d
This change allows sms app to show search result of different directories
in different partitions.
Currently, only personal default and enterprise default directory are
searched.
BUG=26021888
BUG=28016344
(cherry picked from commit 59666b32c192bd28807ccd2f9153c796668bdf13)
Change-Id: I733ceaae806d13661861126ce61c34108ac7e662
TODO: Update the UI to show enterprise result separately (b/26021888)
Bug: 28016344, 25977180
(cherry picked from commit 5c621e57256f5068a43f1456f9bab1194f0d27b2)
Change-Id: I7130ae5e057ed750a29f64c5497a04b868613579
-Previously, Messaging allowed sharing of any file it had permission
to reach. This meant that bad apps could share a link to
file:///data/data/com.android.messaging/databases/bugle_db
and Messaging would happily send all this sensitive information to
the target. Worse, a bad app could share a softlink to this file,
where the symlink was picture.jpg with the image/jpg type.
-Now, when sanitizing attachments, we make sure any filepaths don't
lead to any Bugle-specific directories.
-getApplicationInfo().dataDir is a symlink to
/data/data/com.android.messaging, and appears to be the
only directory where we store personal data.
-Most apps share as contentUris, including Messaging, so Messaging
can still share to itself.
Change-Id: Ic464bc1f099029a030793c478aaf88b957d8bad1
Fixes:28076752
am: 6cedb61
* commit '6cedb6134fb7c4cc701912a919b25273cb46e10c':
Let Messaging dex depend on proguard flag file
Change-Id: Iaeffaba197f17125803ad102416a89979350f69f
am: aa7dc68
* commit 'aa7dc685efb6ce80633b88d30f3b788a2c849452':
Let Messaging dex depend on proguard flag file
Change-Id: I94d0d52cd46a8d77d00619b79d00fd21eea22982
am: 0a0a7cf
* commit '0a0a7cf815af48d589d480c03ad9277e41291dfb':
Match the minimum version in the manifest.
Change-Id: Ifb35c42f8d7171d8fb81ad9187de124b69428597
am: fc922a1
* commit 'fc922a1f53193535d16cdb6c50d24bb1ad862229':
Match the minimum version in the manifest.
Change-Id: Ia21710004fd08a0c57c77301045c910fe27c5353
There is a bug in the current version of Jack
that causes problems when the default is changed to
1.8. Pinning to 1.7 appears to help.
Bug: 27305482
Bug: 26753820
(cherry picked from commit 445d7baabc)
Change-Id: I178ef57bc29cb49064db08d06d501d6aed09c26f
There is a bug in the current version of Jack
that causes problems when the default is changed to
1.8. Pinning to 1.7 appears to help.
Bug: 27305482
Bug: 26753820
Change-Id: Ia29bf5cb14c754be4c4b453aa89a9d9c369d9e52
Jack was disabled because of bugs in Jack and missing support for testing
obfuscated applications. Both are now fixed so Jack can be enabled.
Bug: 27215871
(cherry picked from commit bf6bd40faa)
Change-Id: I73d3c5a3599640932b2305ffe22bb5ef27814ba3
Jack was disabled because of bugs in Jack and missing support for testing
obfuscated applications. Both are now fixed so Jack can be enabled.
Bug: 27215871
Change-Id: I7c437906fe78e1a97204f5e26059966198b15ac1
