commit 13b2978e022d81a6c0519a54743876b0481da401
author James Wei <jameswei@google.com> Tue May 28 17:18:21 2019 +0800
committer Captain Throwback <captainthrowback@hotmail.com> Fri Jul 21 11:38:52 2023 -0400
tree c9a4ec7cd1e1413c00d959eb2aecfeab1099d6b2
parent cf8c128980fbd5470e7794e565b1c6a4a42d8e03

MTP: Sanitize filename provided from MTP host

Fix potential security vulnerability via MTP path traversal

Bug: 130656917
Test: atest frameworks/av/mtp/ffs/tests
Test: Manual test: modified libmtp for path traversal attack
Test: Manual test: normal recursive folder copy
Signed-off-by: sekaiacg <sekaiacg@gmail.com>
Change-Id: I118d180a98378c8fecd9fd6f37de7d5983426695

mtp/ffs/Android.mk

diff --git a/mtp/ffs/Android.mk b/mtp/ffs/Android.mk
index 0f8bda9..90f9d32 100755
--- a/mtp/ffs/Android.mk
+++ b/mtp/ffs/Android.mk
@@ -59,7 +59,8 @@
                           libcutils \
                           libutils \
                           libselinux \
-                          libbase
+                          libbase \
+                          liblog
 
 LOCAL_C_INCLUDES += bootable/recovery/twrplibusbhost/include