tree a6fa4eddd87d3dc7e3af62527e1d6b79f7a17918
parent e0131d9b3b9e77678dacc79e31987f8ac0087de4
author Teow Wan Yee <wy.teow@hi-p.com> 1474358714 +0800
committer Jeron Susan <jeron.susan@hi-p.com> 1474594645 +0800

FPII-2379 : Elevation of privilege vulnerability in Telephony CVE-2016-3914
A-30481342

MmsProvider.openFile validates the current_data column in the database (DB)
and then calls ContentProvider.openFileHelper, which reads from the DB again.
A race condition could cause the second DB read to read an updated, malicious value.
The fix is designed to call MmsProvider.safeOpenFileHelper instead of conducting
the first DB check and calling ContentProvider.openFileHelper.

Change-Id: Iee7dc3d8da17439be8c1c12a45b58cdb13fa71e0