tree 8ef7dbfa1e13198280e41b8b02588bc1395bf572
parent 6433ea1c0ef5f918d3d7f5873a686a5b309b8aea
author Ted Wang <tedwang@google.com> 1574739998 +0800
committer Jakub Pawlowski <jpawlowski@google.com> 1574804256 +0100

Fix potential OOB write in btm_read_remote_ext_features_complete

Add event length check to avoid hci event sent from controller not
correct.
Add page number check to avoid page number is bigger than
HCI_EXT_FEATURES_PAGE_MAX.

Bug: 141552859
Bug: 144205318
Test: inject function
Merged-In: Iaca4db4ee9bf27362f62aba0da088727e98955d1
Change-Id: Iaca4db4ee9bf27362f62aba0da088727e98955d1