FPII-2379 : Elevation of privilege vulnerability in Telephony CVE-2016-3914
A-30481342
MmsProvider.openFile validates the current_data column in the database (DB)
and then calls ContentProvider.openFileHelper, which reads from the DB again.
A race condition could cause the second DB read to read an updated, malicious value.
The fix is designed to call MmsProvider.safeOpenFileHelper instead of conducting
the first DB check and calling ContentProvider.openFileHelper.
Change-Id: Iee7dc3d8da17439be8c1c12a45b58cdb13fa71e0
1 file changed