diff options
| author | Etan Cohen <etancohen@google.com> | 2018-02-02 08:07:20 -0800 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2018-02-26 23:52:19 +0000 |
| commit | 854ac60f94bf63a88b90ccef648bc5b0073a76be (patch) | |
| tree | a97d11d15772fc52d6b95d722cc9d0d93a7b9eb3 | |
| parent | 935288b1f40f8800fc7f703c36d52efd77517c08 (diff) | |
| download | base-854ac60f94bf63a88b90ccef648bc5b0073a76be.tar.gz | |
[RTT] ParcelableRttResults parcel code fix
ParcelableRttResults was unparceled incorrectly.
Bug: 70398564
Test: exploit provided in bug no longer works
Change-Id: Ifd6de547e9861bbebc399b43d0cc2899a8160813
(cherry picked from commit e1e5a2409c8bef2481e68d9329f87bb8037afa45)
| -rw-r--r-- | wifi/java/android/net/wifi/RttManager.java | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/wifi/java/android/net/wifi/RttManager.java b/wifi/java/android/net/wifi/RttManager.java index dc5ba0cc83b5..12a8ddf9fcdc 100644 --- a/wifi/java/android/net/wifi/RttManager.java +++ b/wifi/java/android/net/wifi/RttManager.java @@ -847,8 +847,8 @@ public class RttManager { } dest.writeByte(result.LCR.id); if (result.LCR.id != (byte) 0xFF) { - dest.writeInt((byte) result.LCR.data.length); - dest.writeByte(result.LCR.id); + dest.writeByte((byte) result.LCR.data.length); + dest.writeByteArray(result.LCR.data); } dest.writeByte(result.secure ? (byte) 1 : 0); } |