Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 5ba31e6e: am bba79795: am 25c866a8: am e2adb1ff: Merge "Sanity-check paths of files to be restored" into jb-mr2-dev

Browse Source 
* commit '5ba31e6e9afb34781fe5b927354502d9c6190bc5':
  Sanity-check paths of files to be restored
This commit is contained in:
Jeff Vander Stoep
2014-09-23 17:02:13 +00:00
committed by Android Git Automerger
parent 52824dab7b 5ba31e6e9a
commit 71b19fc301
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
services/java/com/android/server/BackupManagerService.java
View File

@@ -3578,6 +3578,14 @@ class BackupManagerService extends IBackupManager.Stub {
break; break;
} }
// The path needs to be canonical
if (info.path.contains("..") || info.path.contains("//")) {
if (MORE_DEBUG) {
Slog.w(TAG, "Dropping invalid path " + info.path);
}
okay = false;
}
// If the policy is satisfied, go ahead and set up to pipe the // If the policy is satisfied, go ahead and set up to pipe the
// data to the agent. // data to the agent.
if (DEBUG && okay && mAgent != null) { if (DEBUG && okay && mAgent != null) {