am 9aaf54ee: am 71b19fc3: am 5ba31e6e: am bba79795: am 25c866a8: am e2adb1ff: Merge "Sanity-check paths of files to be restored" into jb-mr2-dev
* commit '9aaf54eeb6c1dd83090235a8df5476b2f2f6473e': Sanity-check paths of files to be restored
This commit is contained in:
@@ -3595,6 +3595,14 @@ public class BackupManagerService extends IBackupManager.Stub {
|
||||
break;
|
||||
}
|
||||
|
||||
// The path needs to be canonical
|
||||
if (info.path.contains("..") || info.path.contains("//")) {
|
||||
if (MORE_DEBUG) {
|
||||
Slog.w(TAG, "Dropping invalid path " + info.path);
|
||||
}
|
||||
okay = false;
|
||||
}
|
||||
|
||||
// If the policy is satisfied, go ahead and set up to pipe the
|
||||
// data to the agent.
|
||||
if (DEBUG && okay && mAgent != null) {
|
||||
|
||||
Reference in New Issue
Block a user