diff options
| author | Etan Cohen <etancohen@google.com> | 2018-02-02 08:07:20 -0800 |
|---|---|---|
| committer | JP Sugarbroad <jpsugar@google.com> | 2018-02-13 13:57:06 -0800 |
| commit | a56a6bf1df70314afaed8000a0f2891a698a4dd8 (patch) | |
| tree | 1d4e8169bce8a35d529f997c730cfa700358314c | |
| parent | e8807a2b449b18bea555899f5aba9ba7f349d6e2 (diff) | |
| download | base-a56a6bf1df70314afaed8000a0f2891a698a4dd8.tar.gz | |
[RTT] ParcelableRttResults parcel code fix
ParcelableRttResults was unparceled incorrectly.
Bug: 70398564
Test: exploit provided in bug no longer works
Change-Id: Ifd6de547e9861bbebc399b43d0cc2899a8160813
(cherry picked from commit e1e5a2409c8bef2481e68d9329f87bb8037afa45)
| -rw-r--r-- | wifi/java/android/net/wifi/RttManager.java | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/wifi/java/android/net/wifi/RttManager.java b/wifi/java/android/net/wifi/RttManager.java index 590ff1b1bfaa..8c96774eaeaf 100644 --- a/wifi/java/android/net/wifi/RttManager.java +++ b/wifi/java/android/net/wifi/RttManager.java @@ -766,8 +766,8 @@ public class RttManager { } dest.writeByte(result.LCR.id); if (result.LCR.id != (byte) 0xFF) { - dest.writeInt((byte) result.LCR.data.length); - dest.writeByte(result.LCR.id); + dest.writeByte((byte) result.LCR.data.length); + dest.writeByteArray(result.LCR.data); } dest.writeByte(result.secure ? (byte) 1 : 0); } |