• JP Abgrall's avatar
    server: check interface names in RPC arguments for validity · 69261cb6
    JP Abgrall authored
    
    
    This patch introduces a method isIfaceName that checks interface
    names from various RPCs for validity before e.g. using them as
    part of iptables arguments or in filenames.
    
    All of these RPC calls can only be called from applications
    with at least the CONNECTIVITY_INTERNAL permission in recent
    Android versions, so the impact of the missing checks luckily
    isn't very high.
    
    Orig-Author: Jann Horn <jann@thejh.net>
    
    Change-Id: I80df8d745a3de99ad02d6649f0d10562c81f6b98
    Signed-off-by: default avatarJP Abgrall <jpa@google.com>
    69261cb6
FirewallController.cpp 4.05 KB