Gitiles
Code Review Sign In
gerrit.omnirom.org / android_packages_modules_Virtualization / 2e1d877c181f8a5c279af1c54babf51dc6ae5c87
commit2e1d877c181f8a5c279af1c54babf51dc6ae5c87[log] [tgz]
authorAlan Stokes <alanstokes@google.com>Tue Nov 29 14:15:58 2022 +0000
committerAlan Stokes <alanstokes@google.com>Tue Nov 29 15:07:53 2022 +0000
tree998451fec567822fd7e2f22c8a133dcf6133a60d
parent100b76dc6b1b97012b752623f6d8888be5e1ef47 [diff]
Fix path traversal bug

VM names are used as directory names, we shouldn't allow path
separators in them.

This isn't actually a security issue (we're running in the app's
context, we'll never create any files or directories that the app
couldn't just create itself), but it still seems like a bad thing.

Test: atest MicrodroidTests
Change-Id: I7eec7963b15050239c14d7ef989c6bb623d06b2c
3 files changed
tree: 998451fec567822fd7e2f22c8a133dcf6133a60d
  1. apex/
  2. apkdmverity/
  3. authfs/
  4. avmd/
  5. compos/
  6. demo/
  7. docs/
  8. encryptedstore/
  9. javalib/
  10. launcher/
  11. libs/
  12. microdroid/
  13. microdroid_manager/
  14. pvmfw/
  15. rialto/
  16. tests/
  17. virtualizationservice/
  18. vm/
  19. vm_payload/
  20. vmbase/
  21. vmclient/
  22. zipfuse/
  23. rustfmt.toml ⇨ ../../../build/soong/scripts/rustfmt.toml
  24. .clang-format
  25. .gitignore
  26. Android.bp
  27. OWNERS
  28. PREUPLOAD.cfg
  29. README.md
  30. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.