commit e9b4eb73015f423bfb8d9c940670ddee95ccd776
author Ningyuan Wang <nywang@google.com> Thu Oct 06 13:29:45 2016 -0700
committer Silence.Zhang <Silence.Zhang@hi-p.com> Thu Nov 17 13:52:46 2016 +0800
tree 74852341bfeaad786e9ac222daf1df9f4022fda9
parent 8db2ad5a4d0f64c7cdae6a819d7e765fd34c4a5d

FPII-2585: Elevation of privilege vulnerability in Wi-Fi CVE-2016-6772	A-31856351
wifinative jni: check array length to prevent stack overflow

params.ap is an array with length MAX_HOTLIST_APS == 128
We should check that params.num_bssid does not exceed this value,
otherwise this could be a stack overflow security vulnerability.

CTS will be added in another CL.

Bug: 31856351

Test: compile, unit tests, manual test
Test: SafetyNet log not triggered under non-exploit conditions
Test: POC executable does not crash wifi anymore.
(cherry picked from commit a5a18239096f6faee80f15f3fff39c3311898484)

Change-Id: Id45fdcf1b7c59c3737f6f33c92d424fb64072c83