CBL-8585: Bounds check the peer ID (#503)

borrrden · web-flow · commit 6a8b38dbb5c5 · 2026-07-01T14:58:53.000+09:00
This was mistakenly passed as-is to JNI, but it is not always null terminated
diff --git a/common/main/cpp/native_c4btsocketfactory.cc b/common/main/cpp/native_c4btsocketfactory.cc
@@ -176,7 +176,7 @@ static void btAttached(C4Socket* socket) {
         return;
     }
 
-    jstring jPeerID = env->NewStringUTF((const char *)ctx->peerID.buf);
+    jstring jPeerID = toJString(env, ctx->peerID);
 
     env->CallStaticVoidMethod(
             cls_C4BTSocketFactory, m_attached,

Original file line number	Diff line number	Diff line change
`@@ -176,7 +176,7 @@ static void btAttached(C4Socket* socket) {`
`176`	`176`	`return;`
`177`	`177`	`}`
`178`	`178`
`179`		`- jstring jPeerID = env->NewStringUTF((const char *)ctx->peerID.buf);`
	`179`	`+ jstring jPeerID = toJString(env, ctx->peerID);`
`180`	`180`
`181`	`181`	`env->CallStaticVoidMethod(`
`182`	`182`	`cls_C4BTSocketFactory, m_attached,`