commit 471fff549a08e1229bcd17fc9a316ba172964447
author James Wei <jameswei@google.com> Tue May 28 17:18:21 2019 +0800
committer bigbiff <bigbiff@teamw.in> Sat Jul 22 14:03:11 2023 +0000
tree 10a4cc11720b836fc55649bc84ba8a6125dd785c
parent 8cb6d9a7f05afa21a367368a5ebe251f19613f66

MTP: Sanitize filename provided from MTP host

Fix potential security vulnerability via MTP path traversal

Bug: 130656917
Test: atest frameworks/av/mtp/ffs/tests
Test: Manual test: modified libmtp for path traversal attack
Test: Manual test: normal recursive folder copy
Signed-off-by: sekaiacg <sekaiacg@gmail.com>
Change-Id: I118d180a98378c8fecd9fd6f37de7d5983426695
(cherry picked from commit 13b2978e022d81a6c0519a54743876b0481da401)

mtp/ffs/Android.mk

diff --git a/mtp/ffs/Android.mk b/mtp/ffs/Android.mk
index 0f8bda9..90f9d32 100755
--- a/mtp/ffs/Android.mk
+++ b/mtp/ffs/Android.mk
@@ -59,7 +59,8 @@
                           libcutils \
                           libutils \
                           libselinux \
-                          libbase
+                          libbase \
+                          liblog
 
 LOCAL_C_INCLUDES += bootable/recovery/twrplibusbhost/include