Merge change 6660 into donut

* changes: Fix a small bug in array length bounds checking.
2009-07-09 14:10:38 -07:00
parent e57ff0e1db 6d877383bc
commit 16f676f4f8
1 changed files with 1 additions and 1 deletions
--- a/core/jni/android_backup_BackupDataOutput.cpp
+++ b/core/jni/android_backup_BackupDataOutput.cpp
@@ -70,7 +70,7 @@ writeEntityData_native(JNIEnv* env, jobject clazz, int w, jbyteArray data, int s
    int err;
    BackupDataWriter* writer = (BackupDataWriter*)w;

-    if (env->GetArrayLength(data) > size) {
+    if (env->GetArrayLength(data) < size) {
        // size mismatch
        return -1;
    }