OSDN Git Service

Fix potential OOB write in btm_read_remote_ext_features_complete
authorTed Wang <tedwang@google.com>
Fri, 4 Oct 2019 10:39:02 +0000 (18:39 +0800)
committerTed Wang <tedwang@google.com>
Wed, 16 Oct 2019 08:53:33 +0000 (16:53 +0800)
commit33a71f2955f1254d2f96fd4a4d16d44463a21423
tree64f82444ddb1d79126809cf099a27e7774ec2dff
parent10e15ee4610969b10e7558969fed8ba229d8e5a0
Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than max page
number.

Bug: 141552859
Test: inject function
Merged-In: I3bd7349f382aa0e42123bbd835dcb60b77af099a
Change-Id: I3bd7349f382aa0e42123bbd835dcb60b77af099a
stack/btm/btm_acl.cc
stack/btm/btm_int.h
stack/btu/btu_hcif.cc
stack/include/hcidefs.h