commit dc254cffc064353634d2823df529946f956a8082
author Ningyuan Wang <nywang@google.com> Thu Oct 06 13:29:45 2016 -0700
committer Liisa Anttonen <liisa.anttonen@nedevicesw.com> Fri Dec 23 12:52:48 2016 +0200
tree db81a350593f80423f64397b492dcfd4149af6a3
parent da38b45d209de9497dd80ab050de4fc15969fe51

wifinative jni: check array length to prevent stack overflow

params.ap is an array with length MAX_HOTLIST_APS == 128
We should check that params.num_bssid does not exceed this value,
otherwise this could be a stack overflow security vulnerability.

CTS will be added in another CL.

Bug: 31856351
Change-Id: I807f349ceef5c2f5a46eec87515d3550f8288739
Test: compile, unit tests, manual test
Test: SafetyNet log not triggered under non-exploit conditions
Test: POC executable does not crash wifi anymore.