tree f114266a52493b327ad0ceaefc33c1f5e44e76b9
parent 70e7eae2da6684b884a6d88cd72057c8dc8cba6a
author Sahana Rao <sahanas@google.com> 1588097928 +0100
committer Sahana Rao <sahanas@google.com> 1588101606 +0100

Append GET_ID custom function using bindSelection

GET_ID custom function accepts FileColumns.DATA as input. Previously,
this value was passed as raw string. FileColumns.DATA is obtained from
user input and might result in sql injection.

Changed buildInsert and buildUpdate to append GET_ID custom function
to sql statement using DatabaseUtils.bindSelection

Test: atest packages/providers/MediaProvider
Bug: 154189383
Change-Id: I7279c489e971d96d17a7538388373fb60621daa6