altosui: Don't trust companion telemetry record 'channels' count

It can be bogus, allowing the code to walk off the end of the
allocated data array.

Signed-off-by: Keith Packard <keithp@keithp.com>

diff --git a/altosui/AltosTelemetryRecordCompanion.java b/altosui/AltosTelemetryRecordCompanion.java
index 11b349e1a4b95bf10bc4883e7b9e8e5d2c5f9412..52d7f4cf20052fbace0ae6b3b246e9835d6b16e7 100644 (file)
--- a/altosui/AltosTelemetryRecordCompanion.java
+++ b/altosui/AltosTelemetryRecordCompanion.java
@@ -36,7 +36,7 @@ public class AltosTelemetryRecordCompanion extends AltosTelemetryRecordRaw {
                companion.tick          = tick;
                companion.board_id      = uint8(5);
                companion.update_period = uint8(6+off);
                companion.tick          = tick;
                companion.board_id      = uint8(5);
                companion.update_period = uint8(6+off);

-               for (int i = 0; i < channels; i++)
+               for (int i = 0; i < companion.companion_data.length; i++)

                        companion.companion_data[i] = uint16(8 + off + i * 2);
        }
 
                        companion.companion_data[i] = uint16(8 + off + i * 2);
        }