Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0592ed17 authored by Hui Peng's avatar Hui Peng
Browse files

Fix an OOB bug in set_data 

Bug: 274722163
Test: manual
Ignore-AOSP-First: security
Tag: #security
Change-Id: Ie4b30bbc19ba0bd191839af35880a4831d8005b1
parent 261b9b8d

android/app/jni/com_android_bluetooth_btservice_AdapterService.cpp

+1 −1
Original line number Diff line number Diff line
@@ -1231,7 +1231,7 @@ static jboolean set_data(JNIEnv* env, bt_oob_data_t& oob_data, jobject oobData, 
    }



    oobDataLengthBytes = env->GetByteArrayElements(oobDataLength, NULL);

    memcpy(oob_data.oob_data_length, oobDataLengthBytes, len);

    memcpy(oob_data.oob_data_length, oobDataLengthBytes, OOB_DATA_LEN_SIZE);

    env->ReleaseByteArrayElements(oobDataLength, oobDataLengthBytes, 0);



    // Optional