tree de2e987ea1f105abf2238ee2324d19178b09765e
parent f5c10a299fba0499fa9b31322fb4cee8a78e1eda
author Ted Wang <tedwang@google.com> 1574739998 +0800
committer android-build-team Robot <android-build-team-robot@google.com> 1576650251 +0000

Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than
HCI_EXT_FEATURES_PAGE_MAX.

Bug: 141552859
Bug: 144205318
Test: inject function
Merged-In: Iaca4db4ee9bf27362f62aba0da088727e98955d1
Change-Id: Iaca4db4ee9bf27362f62aba0da088727e98955d1
(cherry picked from commit 2aa92f871c2f2ea2181b74b49bf152f2606fb7c5)