cherry-pick: wifinative jni: check array length for trackSignificantWifiChange
params.ap is an array with length MAX_SIGNIFICANT_CHANGE_APS == 64
We should check that params.num_ap does not exceed this value,
otherwise this could be a stack overflow security vulnerability.
CTS test is not available because CTS test doesn't have the
privilege to access system API.
Test: SafetyNet log not triggered under non-exploit conditions
(cherry picked from commit dc96644e72bbac7b579c3ac4b8c5beed1fe7f0b6)
1 file changed