tree 3645bb17c1563f0f735fc7a0ab3057e7d7499ff4
parent c5cbe3c7fb40dcae54c7aaaf9f74fe5a14967133
author Ted Wang <tedwang@google.com> 1574739998 +0800
committer Ted Wang <tedwang@google.com> 1574751980 +0800

Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than
HCI_EXT_FEATURES_PAGE_MAX.

Bug: 141552859
Bug: 144205318
Test: inject function
Merged-In: Iaca4db4ee9bf27362f62aba0da088727e98955d1
Change-Id: Iaca4db4ee9bf27362f62aba0da088727e98955d1