tree 4602e69e50256ce7cc852e840e990ed0b36b9492
parent 58cc8f2c0254f03d66a28ae1cf0809c171d4ac7d
author James Wei <jameswei@google.com> 1559035101 +0800
committer James Wei <jameswei@google.com> 1581573818 +0800

MTP: Sanitize filename provided from MTP host

Fix potential security vulnerability via MTP path traversal

Bug: 130656917
Test: atest frameworks/av/media/mtp/tests
Test: Manual test: modified libmtp for path traversal attack
Test: Manual test: normal recursive folder copy
Note: Also patched with 68ccf5c (b/135764253)
Change-Id: I467e1e6a76d09951050f7f45e5a63419e540c572
(cherry picked from commit e783e4b24b9e4080e50c50d62a24bcbfabb3e03d)
Merged-In: I467e1e6a76d09951050f7f45e5a63419e540c572