Use resolved path for both checking and opening.
authorJeff Sharkey <jsharkey@android.com>
Thu, 7 Jan 2016 21:15:59 +0000 (14:15 -0700)
committerJeff Sharkey <jsharkey@android.com>
Thu, 14 Jan 2016 21:19:04 +0000 (14:19 -0700)
commit5c08fb8cbeb045b9ce447443208e87f42604d168
tree46755097ef07e038808a6a7bc1ece06753bc7322
parent7460b6e0abad953fc8946296fa3f11bc4b1b60c6
Use resolved path for both checking and opening.

This avoids a race condition where someone can change a symlink
target after the security checks have passed.

Bug: 26211054
Change-Id: I5842aaecc7b7d417a3b1902957b59b8a1f3c1ccb
src/com/android/providers/downloads/DownloadProvider.java
src/com/android/providers/downloads/Helpers.java