OSDN Git Service

(root) / android-x86 / system-bt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aa754ed) | patch
Fix potential OOB write in btm_read_remote_ext_features_complete
authorTed Wang <tedwang@google.com>
Tue, 26 Nov 2019 03:46:38 +0000 (11:46 +0800)
committerTed Wang <tedwang@google.com>
Tue, 26 Nov 2019 07:04:41 +0000 (15:04 +0800)
commitb4e8a17daa72b241ae4ec746536dd489e9ade508
tree2a6b599143d6d528788aaacb91879182c0dd1963tree | snapshot
parentaa754ed3ecfecdbfda8e045385f7df69c1ca6fdecommit | diff
Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than
HCI_EXT_FEATURES_PAGE_MAX.

Bug: 141552859
Bug: 144205318
Test: inject function
Merged-In: Iaca4db4ee9bf27362f62aba0da088727e98955d1
Change-Id: Iaca4db4ee9bf27362f62aba0da088727e98955d1
stack/btm/btm_acl.cc diff | blob | history
stack/btm/btm_int.h diff | blob | history
stack/btu/btu_hcif.cc diff | blob | history
stack/include/hcidefs.h diff | blob | history
system/bt
About OSDN
Find Software
Develop Software
Help