Use resolved path for both checking and opening.
authorJeff Sharkey <jsharkey@android.com>
Thu, 7 Jan 2016 21:15:59 +0000 (14:15 -0700)
committerJeff Sharkey <jsharkey@android.com>
Thu, 14 Jan 2016 21:15:20 +0000 (14:15 -0700)
commit6608eb8feedafab93b840c208a40aa6d6c755584
tree159e92bba45e191f997399c39a2aedf62f4b615a
parent4099afd8117743bdab7ea4281638adadf0f501ba
Use resolved path for both checking and opening.

This avoids a race condition where someone can change a symlink
target after the security checks have passed.

Bug: 26211054
Change-Id: I5842aaecc7b7d417a3b1902957b59b8a1f3c1ccb
src/com/android/providers/downloads/DownloadProvider.java
src/com/android/providers/downloads/Helpers.java