OSDN Git Service

Fix potential OOB write in btm_read_remote_ext_features_complete
authorTed Wang <tedwang@google.com>
Fri, 4 Oct 2019 10:39:02 +0000 (18:39 +0800)
committerTed Wang <tedwang@google.com>
Wed, 16 Oct 2019 06:41:09 +0000 (14:41 +0800)
commit0d7723d147012c3141d259cce24745eb446ff1b1
tree542ee1b6385a16c939c02488aa50cbd57f6eab9c
parent26513d4a93ed51c4b3e3c8608a28cbc41aba79ba
Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than max page
number.

Bug: 141552859
Test: inject function
Merged-In: I3bd7349f382aa0e42123bbd835dcb60b77af099a
Change-Id: I3bd7349f382aa0e42123bbd835dcb60b77af099a
stack/btm/btm_acl.cc
stack/btm/btm_int.h
stack/btu/btu_hcif.cc
stack/include/hcidefs.h