tree c49eafbdc209caab49324912a4a326d49f9b1ca9
parent 1449340134bdc3ae03abe3af10e5eb7ecd2c0030
author Ted Wang <tedwang@google.com> 1574739998 +0800
committer Ted Wang <tedwang@google.com> 1574744046 +0800

Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than
HCI_EXT_FEATURES_PAGE_MAX.

Bug: 141552859
Bug: 144205318
Test: inject function
Merged-In: Iaca4db4ee9bf27362f62aba0da088727e98955d1
Change-Id: Iaca4db4ee9bf27362f62aba0da088727e98955d1