OSDN Git Service

DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete.
authorJeff Sharkey <jsharkey@android.com>
Wed, 25 Jul 2018 20:52:14 +0000 (14:52 -0600)
committerandroid-build-team Robot <android-build-team-robot@google.com>
Thu, 16 Aug 2018 01:23:36 +0000 (01:23 +0000)
commit5632275a17e7d6f559f9f63ec39eac612af89e02
treeb18f7ebfda5c2e47899fdca85566778b46b74c1b
parentdf458137ebc4f879fb69812b0f19fb59162f876a
DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete.

Developers often accept selection clauses from untrusted code, and
SQLiteQueryBuilder already supports a "strict" mode to help catch
SQL injection attacks.  This change extends the builder to support
update() and delete() calls, so that we can help secure those
selection clauses too.

Bug: 111085900
Test: atest packages/providers/DownloadProvider/tests/
Test: atest cts/tests/app/src/android/app/cts/DownloadManagerTest.java
Test: atest cts/tests/tests/database/src/android/database/sqlite/cts/SQLiteQueryBuilderTest.java
Change-Id: Ib4fc8400f184755ee7e971ab5f2095186341730c
Merged-In: Ib4fc8400f184755ee7e971ab5f2095186341730c
(cherry picked from commit 09d49531334ce6bc4ac45de1d3d0edb1495c0566)
core/java/android/database/sqlite/SQLiteDatabase.java
core/java/android/database/sqlite/SQLiteQueryBuilder.java