master

cheerful_rickyfix(ces): canonicalize file path before opening ifstream in GetJsonFromFile

ed9e4d98创建于 3 天前历史提交

文件	最后提交记录	最后更新时间
ability_manager_helper.cpp	add deathRecipient for staticSubscriberConnection Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	5 个月前
access_token_helper.cpp	add label when log Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	9 个月前
bms_death_recipient.cpp	add label when log Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	9 个月前
bundle_manager_helper.cpp	包管理版本隔离 Co-Authored-By: Agent Signed-off-by: zhaobaoxin <zhaobaoxin1@huawei.com> Change-Id: I0e97dfe1e95ffc3151aaac53b54eff7d65d4f00a	3 个月前
common_event_control_manager.cpp	fix(ordered_event): move HandleFinalSubscriber outside lock and fix recursive mutex deadlock - Move HandleFinalSubscriber calls out of ProcessOrderedEventQueueLocked into post-lock phase to reduce lock hold time since IPC operations should not run under orderedMutex_ - Replace CurrentOrderedEventTimeout with HandleTimeoutReceiver in CheckTimeoutForceReceive to avoid recursive locking on orderedMutex_, since ffrt::mutex is non-recursive Signed-off-by: CheerfulRicky <yuegang7@h-partners.com> Co-Authored-By: Agent Change-Id: I6ff0a7629bab164117fb2836e99de11187bf4f6e	1 个月前
common_event_manager_service.cpp	fix(subscribe): move GetBundleName into async lambda to avoid IPC blocking The GetBundleName call in SubscribeCommonEvent was executed on the IPC thread before submitting to the ffrt queue, which could block IPC communication. Moved it into the async lambda, consistent with how PublishCommonEvent already handles this. Co-Authored-By: Agent Signed-off-by: CheerfulRicky <yuegang7@h-partners.com> Change-Id: I2becb67b2a1a310c7f7d7bb0108ca40009c9c868	1 个月前
common_event_manager_service_ability.cpp	add label when log Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	9 个月前
common_event_permission_manager.cpp	update: 更新文件 common_event_permission_manager.cpp Signed-off-by: sunxiaoqianghappy <sunxiaoqiang7@h-partners.com>	13 天前
common_event_sticky_manager.cpp	use compile define to remove dump related method Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	5 个月前
common_event_subscriber_manager.cpp	Fix threading safety: add mutex lock to GetAllFrozenEvents functions Add lock_guard to GetAllFrozenEvents() and GetAllFrozenEventsMap() to prevent data race when copying frozenEvents_ and frozenEventsMap_ while other threads may be modifying them. Co-Authored-By: Agent Signed-off-by: CheerfulRicky <yuegang7@h-partners.com> Change-Id: Id253c5b5b883bd5d1e4b6596cbb50528d2e697ff	2 个月前
event_report.cpp	add label when log Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	9 个月前
inner_common_event_manager.cpp	fix(ces): canonicalize file path before opening ifstream in GetJsonFromFile Use realpath() to canonicalize the path parameter in InnerCommonEventManager::GetJsonFromFile. After canonicalization, add IsValidConfigPath whitelist check to ensure the canonical path is under a controlled directory (/system/etc/, /vendor/etc/, /chipset/etc/), preventing arbitrary file reads. Then open the file with std::ifstream using the canonical path. This follows the realpath+whitelist pattern used in hiviewdfx IsValidPath (faultlog_util.cpp). Add unit tests for GetJsonFromFile covering all branches: - nullptr path, non-existent path (realpath fail) - path outside whitelist (IsValidConfigPath fail) - directory in whitelist (ifstream fail) - invalid/scalar/null/empty/array JSON content (parse fail) - valid JSON object (success) Closes #1238 Co-Authored-By: Agent Signed-off-by: CheerfulRicky <yuegang7@h-partners.com> Change-Id: I2a2d3aa22794c96fe5e048c5915ec09dbfe1f7c8	3 天前
os_account_manager_helper.cpp	Adapt to multiple users Signed-off-by: yuechunyang <yuechunyang1@h-partners.com>	7 个月前
publish_manager.cpp	refactor can log event method Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	7 个月前
static_subscriber_connection.cpp	add mutex for notify Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	5 个月前
static_subscriber_data_manager.cpp	fix key to userId + bundleName Signed-off-by: yuechunyang <yuechunyang1@h-partners.com>	5 个月前
static_subscriber_manager.cpp	memory optimization: Optimize CES memory usage by container improvements - Replace std::map with std::unordered_map for O(1) lookup performance - Replace std::set with std::vector to reduce memory overhead - Compress deliveryState vector from int to uint8_t (4x space saving) - Optimize GetTopSubscriberCounts algorithm from O(n^2) to O(n) - Remove unused #include <list> Signed-off-by: CheerfulRicky <yuegang7@h-partners.com> Co-Authored-By: Agent <agent@example.com> Change-Id: Icb7821f4e2bb0d2e3135ca7df0a12e901670638a	2 个月前
subscriber_death_recipient.cpp	add label when log Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	9 个月前
system_time.cpp	remove eventhandler in common_event_service Signed-off-by: cheerful_ricky <yuegang7@huawei.com>	5 个月前