OSDN Git Service

Externally Reported Moderate Security Issue: SQL Injection in WAPPushManager
authorTom Taylor <tomtaylor@google.com>
Wed, 15 Oct 2014 16:45:39 +0000 (09:45 -0700)
committerTom Taylor <tomtaylor@google.com>
Wed, 15 Oct 2014 16:45:39 +0000 (09:45 -0700)
commitbfb7ffeb3e240784c1ea2a50187c120e6445b20e
tree550dff25f209681ffc502ab9b06268a587c33f98
parent27d3b9264e2dcfb86400a60891a5e39cdf027d55
Externally Reported Moderate Security Issue: SQL Injection in WAPPushManager

Bug 17969135

Use query (instead of rawQuery) and pass in arguments instead of building
the query with a giant string. Add a unit test that fails with the old
code but passes with the new code.

Change-Id: Id04a1db6fb95fcd923e1f36f5ab3b94402590918
packages/WAPPushManager/src/com/android/smspush/WapPushManager.java
packages/WAPPushManager/tests/src/com/android/smspush/unitTests/WapPushTest.java