[automerger] Make sure server response doesn't exceed maximum allowable length... (d0656a11) · Commits · e / os / android_packages_apps_Bluetooth

jni/com_android_bluetooth_gatt.cpp

+6 −1

Original line number	Diff line number	Diff line
		@@ -1770,7 +1770,12 @@ static void gattServerSendResponseNative (JNIEnv *env, jobject object,

		if (val != NULL)
		{
		if (env->GetArrayLength(val) < BTGATT_MAX_ATTR_LEN) {
		response.attr_value.len = (uint16_t)env->GetArrayLength(val);
		} else {
		android_errorWriteLog(0x534e4554, "78787521");
		response.attr_value.len = BTGATT_MAX_ATTR_LEN;
		}
		jbyte* array = env->GetByteArrayElements(val, 0);

		for (int i = 0; i != response.attr_value.len; ++i)