DO NOT MERGE. Use resolved path for both checking and opening.
authorJeff Sharkey <jsharkey@android.com>
Thu, 7 Jan 2016 21:15:59 +0000 (14:15 -0700)
committerJeff Sharkey <jsharkey@google.com>
Thu, 21 Jan 2016 00:40:24 +0000 (00:40 +0000)
commit8a2e55187463fd4f8e9f6e80ae89c4e6dcb9b9f6
tree055e5d0c896f698bf13e8c01a7c2f7ba78dfe721
parent6947a091f1d9d2b62f5d4a6429df2679ffe5434b
DO NOT MERGE. Use resolved path for both checking and opening.

This avoids a race condition where someone can change a symlink
target after the security checks have passed.

Bug: 26211054
Change-Id: Ie3d2ff0be3f9590869302f0c2d6cdbca1377e7ce
src/com/android/providers/downloads/DownloadProvider.java
src/com/android/providers/downloads/DownloadThread.java
src/com/android/providers/downloads/Helpers.java