tree 4fe22125596449ed1238969d964df191b11735e5
parent ff91ec356f1b17dea095a880f61b8bc4ff333b1e
author Chiao Cheng <chiaocheng@google.com> 1373502664 -0700
committer Chiao Cheng <chiaocheng@google.com> 1373669566 -0700

Do not allow updates to the _data column.

Fixes a security hole where applications can update the data location of
voicemail files to point to arbitrary file paths.

Voicemail provider stores the location of the data file in the _data column.
Applications can update this with an arbitrary file path as long as they
have the ADD_VOICEMAIL permission.  Then they can subsequently read that
voicemail and obtain access to the file. This location is generated by the
provider and does not need to be updated by the applications.

Bug: 9674953
(cherry picked from commit ab2a24c126f35ae4aefb469f91094e5972abd8f0)

Change-Id: I6c795fe8e283f60f71ebc0e53606383c9fd22e71