a2aa53f83a
attach private files from "/data/data/com.android.messaging/" directory to the messaging app. * This is a manual merge from ag/871758 -- backporting a security fix from Bugle to Kazoo. * Don't export the MediaScratchFileProvider or the MmsFileProvider. This will block external access from third party apps. In addition, make both providers more robust in handling path names. Make sure the file paths handled in the providers point to the expected directory. Change-Id: I9e6b3ae0e122e3f5022243418f2893d4a0859edb Fixes: 32807795
87 lines
2.8 KiB
Java
87 lines
2.8 KiB
Java
/*
|
|
* Copyright (C) 2015 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
package com.android.messaging.datamodel;
|
|
|
|
import android.content.Context;
|
|
import android.net.Uri;
|
|
import android.text.TextUtils;
|
|
|
|
import com.android.messaging.Factory;
|
|
import com.android.messaging.util.LogUtil;
|
|
import com.google.common.annotations.VisibleForTesting;
|
|
|
|
import java.io.File;
|
|
import java.io.IOException;
|
|
|
|
/**
|
|
* A very simple content provider that can serve mms files from our cache directory.
|
|
*/
|
|
public class MmsFileProvider extends FileProvider {
|
|
private static final String TAG = LogUtil.BUGLE_TAG;
|
|
|
|
@VisibleForTesting
|
|
static final String AUTHORITY = "com.android.messaging.datamodel.MmsFileProvider";
|
|
private static final String RAW_MMS_DIR = "rawmms";
|
|
|
|
/**
|
|
* Returns a uri that can be used to access a raw mms file.
|
|
*
|
|
* @return the URI for an raw mms file
|
|
*/
|
|
public static Uri buildRawMmsUri() {
|
|
final Uri uri = FileProvider.buildFileUri(AUTHORITY, null);
|
|
final File file = getFile(uri.getPath());
|
|
if (!ensureFileExists(file)) {
|
|
LogUtil.e(TAG, "Failed to create temp file " + file.getAbsolutePath());
|
|
}
|
|
return uri;
|
|
}
|
|
|
|
@Override
|
|
File getFile(final String path, final String extension) {
|
|
return getFile(path);
|
|
}
|
|
|
|
public static File getFile(final Uri uri) {
|
|
return getFile(uri.getPath());
|
|
}
|
|
|
|
private static File getFile(final String path) {
|
|
final Context context = Factory.get().getApplicationContext();
|
|
final File filePath = new File(getDirectory(context), path + ".dat");
|
|
|
|
try {
|
|
if (!filePath.getCanonicalPath()
|
|
.startsWith(getDirectory(context).getCanonicalPath())) {
|
|
LogUtil.e(TAG, "getFile: path "
|
|
+ filePath.getCanonicalPath()
|
|
+ " does not start with "
|
|
+ getDirectory(context).getCanonicalPath());
|
|
return null;
|
|
}
|
|
} catch (IOException e) {
|
|
LogUtil.e(TAG, "getFile: getCanonicalPath failed ", e);
|
|
return null;
|
|
}
|
|
return filePath;
|
|
}
|
|
|
|
private static File getDirectory(final Context context) {
|
|
return new File(context.getCacheDir(), RAW_MMS_DIR);
|
|
}
|
|
}
|