Gitiles
Code Review Sign In
gerrit.twrp.me / android_bootable_recovery / 471fff549a08e1229bcd17fc9a316ba172964447
commit471fff549a08e1229bcd17fc9a316ba172964447[log] [tgz]
authorJames Wei <jameswei@google.com>Tue May 28 17:18:21 2019 +0800
committerbigbiff <bigbiff@teamw.in>Sat Jul 22 14:03:11 2023 +0000
tree10a4cc11720b836fc55649bc84ba8a6125dd785c
parent8cb6d9a7f05afa21a367368a5ebe251f19613f66 [diff]
MTP: Sanitize filename provided from MTP host

Fix potential security vulnerability via MTP path traversal

Bug: 130656917
Test: atest frameworks/av/mtp/ffs/tests
Test: Manual test: modified libmtp for path traversal attack
Test: Manual test: normal recursive folder copy
Signed-off-by: sekaiacg <sekaiacg@gmail.com>
Change-Id: I118d180a98378c8fecd9fd6f37de7d5983426695
(cherry picked from commit 13b2978e022d81a6c0519a54743876b0481da401)
2 files changed
tree: 10a4cc11720b836fc55649bc84ba8a6125dd785c
  1. .github/
  2. adbbu/
  3. applypatch/
  4. attr/
  5. bmlutils/
  6. bootloader_message/
  7. crypto/
  8. dosfstools/
  9. edify/
  10. etc/
  11. exfat/
  12. fastboot/
  13. fb2png/
  14. flashutils/
  15. fonts/
  16. fuse/
  17. fuse_sideload/
  18. gpt/
  19. gui/
  20. injecttwrp/
  21. install/
  22. libblkid/
  23. libcrecovery/
  24. libmincrypt/
  25. libpixelflinger/
  26. libtar/
  27. minadbd/
  28. minui/
  29. minuitwrp/
  30. minzip/
  31. mmcutils/
  32. mtdutils/
  33. mtp/
  34. openaes/
  35. orscmd/
  36. otafault/
  37. otautil/
  38. ozip_decrypt/
  39. pigz/
  40. prebuilt/
  41. recovery_ui/
  42. recovery_utils/
  43. res/
  44. res-hdpi/
  45. res-mdpi/
  46. res-xhdpi/
  47. res-xxhdpi/
  48. res-xxxhdpi/
  49. scripts/
  50. sepolicy/
  51. simg2img/
  52. soong/
  53. tests/
  54. tools/
  55. twrpDigest/
  56. twrpinstall/
  57. twrpTarMain/
  58. uncrypt/
  59. update_verifier/
  60. updater/
  61. updater_sample/
  62. .clang-format
  63. .gitignore
  64. abx-functions.hpp
  65. Android.bp
  66. Android.mk
  67. BasePartition.cpp
  68. bootloader.h
  69. CleanSpec.mk
  70. data.cpp
  71. data.hpp
  72. exclude.cpp
  73. exclude.hpp
  74. find_file.cpp
  75. find_file.hpp
  76. fixContexts.cpp
  77. fixContexts.hpp
  78. fuse.h
  79. infomanager.cpp
  80. infomanager.hpp
  81. interlace-frames.py
  82. kernel_module_loader.cpp
  83. kernel_module_loader.hpp
  84. legacy_properties.h
  85. libaosprecovery_defaults.go
  86. METADATA
  87. mounts.c
  88. NOTICE
  89. openrecoveryscript.cpp
  90. openrecoveryscript.hpp
  91. OWNERS
  92. partition.cpp
  93. partitionmanager.cpp
  94. partitions.hpp
  95. PREUPLOAD.cfg
  96. progresstracking.cpp
  97. progresstracking.hpp
  98. README.md
  99. recovery-persist.cpp
  100. recovery-persist.rc
  101. recovery-refresh.cpp
  102. recovery-refresh.rc
  103. recovery.cpp
  104. recovery.h
  105. recovery_main.cpp
  106. recovery_ui.h
  107. startupArgs.cpp
  108. startupArgs.hpp
  109. tarWrite.c
  110. tarWrite.h
  111. TEST_MAPPING
  112. twcommon.h
  113. twrp-functions.cpp
  114. twrp-functions.hpp
  115. twrp.cpp
  116. twrpAdbBuFifo.cpp
  117. twrpAdbBuFifo.hpp
  118. twrpApex.cpp
  119. twrpApex.hpp
  120. twrpDigestDriver.cpp
  121. twrpDigestDriver.hpp
  122. twrpRepacker.cpp
  123. twrpRepacker.hpp
  124. twrpTar.cpp
  125. twrpTar.h
  126. twrpTar.hpp
  127. variables.h