From 6d877383bc2e2952cad48780c410ed452870a5a4 Mon Sep 17 00:00:00 2001 From: Dan Egnor Date: Thu, 9 Jul 2009 13:48:36 -0700 Subject: Fix a small bug in array length bounds checking. --- core/jni/android_backup_BackupDataOutput.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/jni/android_backup_BackupDataOutput.cpp b/core/jni/android_backup_BackupDataOutput.cpp index d02590e62e69..ce30aaa89006 100644 --- a/core/jni/android_backup_BackupDataOutput.cpp +++ b/core/jni/android_backup_BackupDataOutput.cpp @@ -70,7 +70,7 @@ writeEntityData_native(JNIEnv* env, jobject clazz, int w, jbyteArray data, int s int err; BackupDataWriter* writer = (BackupDataWriter*)w; - if (env->GetArrayLength(data) > size) { + if (env->GetArrayLength(data) < size) { // size mismatch return -1; } -- cgit v1.2.3-59-g8ed1b