1. 2508318 Fix integer overflow when parsing avrc response by Keith Mok · 2 years, 3 months ago
  2. b81b232 Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 3 months ago
  3. d37419b Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 3 months ago
  4. d4a90db RESTRICT AUTOMERGE Added max buffer length check by Brian Delwiche · 2 years, 3 months ago
  5. f5a07b7 Add length check when copy AVDTP packet by Ted Wang · 2 years, 3 months ago
  6. b3547e6 Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 3 months ago
  7. ced6c9b Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 3 months ago
  8. ba9a7ee Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 8 months ago
  9. d9f4cb9 Removing bonded device when auth fails due to missing keys by Roopa Sattiraju · 2 years, 6 months ago
  10. 221f304 Merge cherrypicks of [17777141, 18119099, 18030837] into security-aosp-qt-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  11. 75d51f2 Security: Fix out of bound read in AT_SKIP_REST by Josh Wu · 2 years, 7 months ago
  12. 8b644d9 Check Avrcp packet vendor length before extracting length by William Escande · 2 years, 6 months ago
  13. f6bba8d Security: Fix out of bound write in HFP client by Chen Chen · 2 years, 7 months ago
  14. 5b4b799 Merge cherrypicks of [16630869] into security-aosp-qt-release. by Android Build Coastguard Worker · 2 years, 9 months ago
  15. 8c6477c Security fix OOB read due to invalid count in stack/avrc/avrc_pars_ct by Ted Wang · 2 years, 10 months ago
  16. e315793 Merge cherrypicks of [16215818, 16232312] into security-aosp-qt-release. by Android Build Coastguard Worker · 3 years ago
  17. 7ffaeac Reset the IRK after all devices are unpaired by Martin Brabham · 3 years ago
  18. 4bcc8f4 security: Use-After-Free in btm_sec_[dis]connected by Chris Manton · 3 years ago
  19. 67ba9a3 Merge cherrypicks of [16009370, 16012241, 16012242, 16012310, 16012367, 16012311, 16012312, 16012313, 16012216, 16012387, 16012388, 16012390, 16012335, 16012391] into security-aosp-qt-release by Android Build Coastguard Worker · 3 years, 1 month ago
  20. 7ea885a osi: Prevent memory allocations with MSB set by Chris Manton · 3 years, 1 month ago
  21. f9dd970 Merge cherrypicks of [15151697, 15151718, 15151899, 15151900, 15151901, 15151902, 15151904, 15151906, 15151930, 15151932, 15151933, 15151856, 15151858, 15151388, 15151971, 15151972, 15151973] into security-aosp-qt-release by Android Build Coastguard Worker · 3 years, 5 months ago
  22. 5c72690 SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years, 5 months ago
  23. a2b637d Merge cherrypicks of [14554379, 14554380, 14554562, 14554565, 14554567, 14554524, 14554569, 14554525, 14554572, 14554574, 14554575, 14554577, 14554622, 14554628, 14554630, 14554631, 14554503, 14554632, 14554536, 14554633] into security-aosp-qt-release by android-build-team Robot · 3 years, 6 months ago
  24. 9446887 Fix memory overflow. by Richard Smith · 3 years, 9 months ago
  25. 267820f Merge cherrypicks of [14129455, 14130265, 14129457, 14130197, 14130199, 14130200, 14130201, 14130203, 14129438, 14129439, 14129732, 14129441, 14130241, 14129733, 14129734, 14130308, 14130309, 14130310, 14130312] into security-aosp-qt-release by android-build-team Robot · 3 years, 7 months ago
  26. 72ee2f7 RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write by Chris Manton · 3 years, 8 months ago
  27. 4bba21e AVRCP: pass bdaddr by value when use SdpCb by Chienyuan · 3 years, 9 months ago
  28. c28ac24 smp: Use SMP_TRACE_WARNING by Myles Watson · 3 years, 8 months ago
  29. bb0ae6b smp: Reject pairing if the public keys match by Myles Watson · 3 years, 9 months ago
  30. 0e64344 avrcp: Ignore AVCT commands that are too long by Myles Watson · 3 years, 9 months ago
  31. a1a50cc btif: Return after closing the socket by Myles Watson · 3 years, 9 months ago
  32. d62a78d DO NOT MERGE Add mutex for std::map in btif_av.cc by Chienyuan · 3 years, 10 months ago
  33. 931873c AVRCP: Use calloc to zero reserved fields by Myles Watson · 4 years ago
  34. dfe277c avrc_copy_packet: Zero initialize packet by Hansong Zhang · 4 years ago
  35. 09ec6a0 Legacy pairing: Reject device with same BD_ADDR by Hansong Zhang · 4 years ago
  36. c7435ba SDP: Only start discovery once by Myles Watson · 4 years ago
  37. 876eae1 ACL: Drop broadcasts by Myles Watson · 4 years ago
  38. e7305d9 Fix potential OOB write in libbluetooth by Ted Wang · 4 years, 1 month ago
  39. 65502ea Fix a security issue in sdp_server.cc by Hansong Zhang · 4 years, 1 month ago
  40. e99896d Check Classic key before cross-key derivation by Chen Chen · 4 years, 2 months ago
  41. 3a85188 Send a response to an smp security request depending on the callback event by Rahul Sabnis · 4 years, 3 months ago
  42. 6d3ae14 Return after removing sample LTK device by li-wei.cheng · 4 years, 10 months ago
  43. d298c89 Check whether local device is an ATV device to determine whether to show by Rahul Sabnis · 4 years, 3 months ago
  44. 2ec4767 Shows a consent dialog on the local device when pairing a bluetooth low by Rahul Sabnis · 4 years, 5 months ago
  45. 3fd0365 Fix possible OOB when receive gatt read type response data by weichinweng · 4 years, 4 months ago
  46. 6f5dae5 Remove pairing on incoming bond request by Myles Watson · 4 years, 5 months ago
  47. 270a7cf Enable bitpool sanity checks by Joseph Pirozzo · 4 years, 6 months ago
  48. 634f0e4 Check a2dp packet length is zero by Chris Manton · 4 years, 8 months ago
  49. 72980ee Fix potential stack overflow caused by integer overflow by Jakub Pawlowski · 4 years, 8 months ago
  50. 729a819 GattServcer: Check invalid offset by Hansong Zhang · 4 years, 9 months ago
  51. f4fb3ef AAC Decoder: Use osi_free() to free buffers allocated by osi_malloc() by Hansong Zhang · 4 years, 9 months ago
  52. cbbad7a SDP: add return after SDP disconnection by Zongheng Wang · 5 years ago
  53. 9eda71d Fix potential OOB write in btm_read_remote_ext_features_complete by Ted Wang · 5 years ago
  54. dd7d9e5 GAP: Correct the continuous pkt length in l2cap by Venkata Jagadeesh Garaga · 6 years ago
  55. 4d9c448 [system][bt] fix -Wdangling-gsl by Nick Desaulniers · 5 years ago
  56. a93de16 Fix read out of bounds in BtifAvEvent::DeepCopy by Jakub Pawlowski · 5 years ago
  57. b623e05 JustWorks: Auto-accept only incoming temporary pairing. by Martin Brabham · 5 years ago
  58. a407676 SDP: Disconnect when there is a bad length by Zongheng Wang · 5 years ago
  59. 9ca0d7c Use memcpy instead of casting to convert device_class to int by Rahul Sabnis · 5 years ago
  60. dc22bc9 SDP: disconnect if sdp_copy_raw_data fails by Zongheng Wang · 5 years ago
  61. 31fc9e1 Store BLE keys using the address from the ble_auth_cmpl_evt by Ugo Yu · 5 years ago
  62. 0f203f6 Snap for 5719587 from c14c14fbc43d0080d0ae46e6eb310307778f40a7 to qt-release by android-build-team Robot · 5 years ago
  63. c14c14f Switch Nintendo workaround to match by name by Andre Eisenbach · 5 years ago
  64. b71ebf2 Match Nintento Pro Controller by name for interop by Andre Eisenbach · 5 years ago
  65. 75e5fd2 Snap for 5706892 from eb9a7750869109601764a33ec0006f93145d20da to qt-release by android-build-team Robot · 5 years ago
  66. eb9a775 RootCanal: Set the timer period to 1 second by Myles Watson · 5 years ago
  67. 10127dd Snap for 5702458 from 155a2373f35e1eb28f50f7d4f937f386d085e337 to qt-release by android-build-team Robot · 5 years ago
  68. 155a237 Merge "RootCanal: Make beacons less verbose" into qt-dev by TreeHugger Robot · 5 years ago
  69. 80f277f RootCanal: Make beacons less verbose by Myles Watson · 5 years ago
  70. 8710369 Snap for 5698743 from 6160b51adcb48d48c64803cc3d96ae8d50592ea9 to qt-release by android-build-team Robot · 5 years ago
  71. 6160b51 DO NOT MERGE RootCanal: Always add default devices by Myles Watson · 5 years ago
  72. de36699 Snap for 5674462 from 0c4d5997a4ae602b636e22156e1cc7957125fddf to qt-release by android-build-team Robot · 5 years ago
  73. d33ace4 Merge cherrypicks of [8059010, 8059027, 8059344, 8059225, 8059029, 8058795, 8059012] into qt-release by android-build-team Robot · 5 years ago
  74. e48436e Revert "libprocessgroup users use libcutils" by Zhijun He · 5 years ago
  75. 0c4d599 Revert "libprocessgroup users use libcutils" by Zhijun He · 5 years ago
  76. 3f6a355 Snap for 5671254 from 93e1622ba65005d5611fc315503e4ed2f8a09658 to qt-release by android-build-team Robot · 5 years ago
  77. 85d56a8 Limit sniff mode for Nintendo Pro Controller to 11.25ms by Andre Eisenbach · 5 years ago
  78. 1d0646a Merge "Revert "DO NOT MERGE: btif: require pairing dialog for JustWorks SSP"" into qt-dev by TreeHugger Robot · 5 years ago
  79. 19d8c6e Revert "DO NOT MERGE: btif: require pairing dialog for JustWorks SSP" by Martin Brabham · 5 years ago
  80. 93e1622 libprocessgroup users use libcutils by Steven Moreland · 5 years ago
  81. c5a4b2c Snap for 5663820 from 981864174efb4755d177538219dc7fa842072e04 to qt-release by android-build-team Robot · 5 years ago
  82. 9818641 Fix for BluetoothGattCallback.onConnectionStateChange being called more than once by Jakub Pawlowski · 5 years ago
  83. 7d0b67a Snap for 5656475 from d8cdc6c2b802fbc0c5a5b4f1599a9e6d911e74b9 to qt-release by android-build-team Robot · 5 years ago
  84. d8cdc6c Load gatt_database if it is empty in bta_gattc_process_indicate by weichinweng · 5 years ago
  85. ebbc802 Merge "Snap for 5652499 from 1ae89b7db2a031500f0b13b455ac63fb8624f084 to qt-release" into qt-release by android-build-team Robot · 5 years ago
  86. 9050652 Snap for 5652499 from 1ae89b7db2a031500f0b13b455ac63fb8624f084 to qt-release by android-build-team Robot · 5 years ago
  87. 009945f Snap for 5652499 from 1ae89b7db2a031500f0b13b455ac63fb8624f084 to qt-release by android-build-team Robot · 5 years ago
  88. 1ae89b7 Revert "Open connection if it doesn't exsist in bta_gattc_process_indicate" by Jakub Pawlowski · 5 years ago
  89. 65b1311 Snap for 5645017 from bd8c5865c9991dd318c7ac47263b527ad7a4cd9b to qt-release by android-build-team Robot · 5 years ago
  90. bd8c586 Confirm the presence of BT key when BT ON by Martin Brabham · 5 years ago
  91. 4ea1ac1 [automerger skipped] Merge changes from topic "am-e3f94184-0df3-403b-b2dc-4ebd50beee32" into oc-dev am: 38535adcd0 -s ours am: 28a8e8b848 -s ours am: c5837d3d81 -s ours by Jakub Pawlowski · 5 years ago
  92. 82398ca [automerger skipped] DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size am: 461f0b4739 -s ours am: 35f2cb15f1 -s ours am: 75384547fb -s ours by Jakub Pawlowski · 5 years ago
  93. 5b7daae [automerger skipped] Merge changes from topic "am-e3f94184-0df3-403b-b2dc-4ebd50beee32" into oc-dev am: 38535adcd0 -s ours am: 28a8e8b848 -s ours by Jakub Pawlowski · 5 years ago
  94. dd59bd4 [automerger skipped] DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size am: 461f0b4739 -s ours am: 35f2cb15f1 -s ours by Jakub Pawlowski · 5 years ago
  95. c5837d3 [automerger skipped] Merge changes from topic "am-e3f94184-0df3-403b-b2dc-4ebd50beee32" into oc-dev am: 38535adcd0 -s ours by Jakub Pawlowski · 5 years ago
  96. 7538454 [automerger skipped] DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size am: 461f0b4739 -s ours by Jakub Pawlowski · 5 years ago
  97. 28a8e8b [automerger skipped] Merge changes from topic "am-e3f94184-0df3-403b-b2dc-4ebd50beee32" into oc-dev by Jakub Pawlowski · 5 years ago
  98. 35f2cb1 [automerger skipped] DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size by Jakub Pawlowski · 5 years ago
  99. 38535ad Merge changes from topic "am-e3f94184-0df3-403b-b2dc-4ebd50beee32" into oc-dev by Jakub Pawlowski · 5 years ago
  100. 04d073c [automerger skipped] DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size am: bdac7b911f -s ours by Jakub Pawlowski · 5 years ago