Tom Taylor 69ed579fb8 32161610 Security Vulnerability - Information disclosure vulnerability ...

in AOSP Messaging

* Check to make sure the returned uri from the gallery picker does
not point to bugle's data directory (or any subdir).

* Test:
Manual-
* I created the test app in the bug, the one that injects the bad
uri into Bugle. I verified the bad behavior before the fix and the
good behavior after.
* I tested the gallery to make sure picking photos,
from the photos app and drive, still work.
* I verified the behavior in the debugger to be sure the code is
catching the bad uri from the test app.

Change-Id: I3393f3b886c837a49758b91945cf1e17ec9bee41
Fixes: 32161610

2016-12-05 13:57:45 -08:00

assets

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

build

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

jni

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

res

Theme colored ic_preview_pause and ic_preview_play icons

2015-09-01 15:29:16 -07:00

src

32161610 Security Vulnerability - Information disclosure vulnerability

2016-12-05 13:57:45 -08:00

tests

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

tools

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

Android.mk

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

AndroidManifest.xml

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

ForceProguard.mk

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

proguard-release.flags

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

proguard-test.flags

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

proguard.flags

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

version.mk

Initial checkin of AOSP Messaging app.

2015-08-12 12:47:26 -07:00

Description

LineageOS Messaging app - base for default SMS handler

12 MiB

Languages

Java 97.6%

HTML 1.1%

C++ 0.8%

Shell 0.4%

Makefile 0.1%