Merge "Fix an OOB bug in parameters_response_parser" into tm-dev am: d2e98455 am: 922ca83e

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22948054



Change-Id: Ia18f2a3bf30dcba13e9e8a60596884019e3af094
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

system/stack/btm/ble_advertiser_hci_interface.cc

@@ -84,6 +84,11 @@ void parameters_response_parser(BleAdvertiserHciInterface::parameters_cb cb,
   int8_t tx_power;
 
   uint8_t* pp = ret_params;
+  if (ret_params_len < 2) {
+    LOG(ERROR) << "unexpected ret_params_len: " << ret_params_len;
+    return;
+  }
+
   STREAM_TO_UINT8(status, pp);
   STREAM_TO_INT8(tx_power, pp);