tree 865a3ba38dfb711cb96aa4223690dfceebda3097
parent 452229bfd556c9899fd4428a3918c788d5b07761
author spickl <spickl@google.com> 1674761159 +0000
committer Michael Bestas <mkbestas@lineageos.org> 1696859951 +0300
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJLBAABCgA1FiEEHrBYPudH862glXQBzJUERRm+ZmkFAmUkBy8XHG1rYmVzdGFz
 QGxpbmVhZ2Vvcy5vcmcACgkQzJUERRm+ZmkgSRAAgTvq5X3jHdS5vsavaYv24GZI
 L3vArvAx5W05lvRMUHzr2Ol3KHwQlby17JRsHQHBvCyCOdQ6cqkoGn9vSJdKkUhu
 6Aq4rWClISaiEFDDhIOG9YAC5doKPdlksPQAyLZK6N1UJxq1RAiMoVV449uTzebR
 +4zdXVdlCTqrLxHL/4SDJG7QPt9vwr7/rwPPJKCGIm83vniazgqYwizMZPmvImFS
 whx4MluzUAsnrPRWTBrZP3qybMhI6FltyHIywJEdXGO/WhQ+WdfCHQ7aHopb0DDv
 Fcqu3TNzjnmpNUk/OqpAZu8LW5RWBHjONdJV2B9Wu1v5vXAN1Bj/QRZ77zKOzsEm
 58eRVwQGUpaH/IKMqz9oxabCH1wuklgHlqAxhQIY/qx6o6xuT3IMrt7y7vFA9FWf
 +B0IkA+R6FTiqBTFOk16OhFNNG82GofF3d8qRTZzzmalBtADKDKSBZvRGJebAzAg
 3ZqcYTt+p8IsNJdYdER9LF5Tr0KbmStDGHf+LLxj0J3P8/FMrBLiIX8VaqJaS8Ab
 R5LthSl+Y4cAQA7Up9OoeRWcssNa7ouc712KLv/LCYIX3hLd4um6BeodYrsAqPjw
 0vZDXrUrrfVzIUmTfxZKV75nBB208XK31hISZBs252xRMqtLUcFg+ddrImZiibJp
 xJI1xFajXh7DaJYVFBA=
 =l8jp
 -----END PGP SIGNATURE-----

Fix Gallery2 path traversal bug

Fix a path traversal bug that allowed a malicious launcher app to access files in the private space of the Gallery2 app by injecting a bad path.
Fix: Check URI before passing the file out from SharedImageProvider and raise exception if it's not pointing to the relevant folder.
Bug: 198174170
Test: manual by following the reporters instructions

Change-Id: I74dce6c4794b3eafb922bb9a2f2516677cc5f4d8