Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / system / bt / 2acb8e2b1ce511bcf73ba131822bef592e9d5981
  1. 2acb8e2 Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" by Arjun Garg · 4 years, 11 months ago
  2. 4d57cc3 DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size by Jakub Pawlowski · 5 years ago
  3. 669c21e DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 5 years ago
  4. 1a82722 DO NOT MERGE Send HCI Read Encryption Key properly by Jakub Pawlowski · 5 years ago
  5. 0308024 DO NOT MERGE Fix potential OOB read in sdpu_get_len_from_type by Ted Wang · 5 years ago
  6. 89674a2 DO NOT MERGE Don't persist bonds using sample LTK by Jakub Pawlowski · 5 years ago
  7. a59a379 DO NOT MERGE Drop Bluetooth connection with weak encryption key by Jakub Pawlowski · 5 years ago
  8. 31df47a Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" by JP Sugarbroad · 5 years ago
  9. 621fc01 DO NOT MERGE Fix length for L2CAP config type EXT FLOW by Hansong Zhang · 5 years ago
  10. 98ed90c DO NOT MERGE btm_proc_smp_cback: Don't access p_dev_rec if freed by Hansong Zhang · 5 years ago
  11. 5dd354b DO NOT MERGE process_l2cap_cmd: Fix OOB by Hansong Zhang · 5 years ago
  12. 5cd6a9f DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 6 years ago
  13. 2736fbc DO NOT MERGE A security fix to check buffer length in l2c_lcc_proc_pdu by Stanley Tng · 5 years ago
  14. 4a71fca Fix buffer overflow in btif_dm_data_copy by Jakub Pawlowski · 6 years ago
  15. 9f9bbcf Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm by Jakub Pawlowski · 6 years ago
  16. 9d3a7b2 DO NOT MERGE HFP: Check AT command buffer boundary during parsing by Chienyuan · 6 years ago
  17. bf3d4f6 DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr by Myles Watson · 6 years ago
  18. 2fbc0f1 DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp by Myles Watson · 6 years ago
  19. 8ec7232 DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act by Myles Watson · 6 years ago
  20. 8dee3a4 DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data by Ugo Yu · 6 years ago
  21. 7147c33 Fix possible OOB read in process_service_search_rsp by Jakub Pawlowski · 6 years ago
  22. f049e30 DO NOT MERGE - Check SDU lower bound before allocate p_data by Ugo Yu · 6 years ago
  23. 5ce9a30 DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() by Pavlin Radoslavov · 6 years ago
  24. e7e90a7 DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses by Pavlin Radoslavov · 6 years ago
  25. f135bc2 DO NOT MERGE Check remaining frame length in rfc_process_mx_message by Hansong Zhang · 6 years ago
  26. 8a3e6b8 DO NOT MERGE Fix a wrong check in rfc_parse_data by Hansong Zhang · 6 years ago
  27. 3717ce7 DO NOT MERGE Add bound check for rfc_parse_data by Hansong Zhang · 6 years ago
  28. 37012f7 DO NOT MERGE Add packet length check in smp_proc_master_id by Ugo Yu · 6 years ago
  29. 70b6399 Checks the SMP length to fix OOB read by Cheney Ni · 6 years ago
  30. 9c379f4 Fix copy length calculation in sdp_copy_raw_data by Jakub Pawlowski · 6 years ago
  31. b8e055b DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback by Pavlin Radoslavov · 6 years ago
  32. b8cf11d DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req by Cheney Ni · 6 years ago
  33. f776ede DO NOT MERGE Check packet length in bta_av_proc_meta_cmd by Chienyuan · 6 years ago
  34. 41f1103 DO NOT MERGE Fix OOB read before buffer length check by Ugo Yu · 6 years ago
  35. c0d01da DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp by Hansong Zhang · 6 years ago
  36. 2f425ed DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 6 years ago
  37. c6216cf DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 6 years ago
  38. 8efc86e Don't use Address after it was deleted by Jakub Pawlowski · 6 years ago
  39. 84cf108 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 6 years ago
  40. c731ffb DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 6 years ago
  41. 0c0435b SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 6 years ago
  42. 81d0e32 DO NOT MERGE HFP: Fix out of bound access in phone number processing by Jack He · 6 years ago
  43. 8a1add8 DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 6 years ago
  44. d3b4884 Revert "DO NOT MERGE: SDP: Recalculate param_len after max_list_len" by Max Spector · 6 years ago
  45. 135b23f DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 6 years ago
  46. 9ee2c32 Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 6 years ago
  47. 640f001 DO NOT MERGE BNEP: Fix build breakage by using osi_free instead of GKI_freebuf by Jack He · 6 years ago
  48. b15ae8d BNEP: Fix OOB access in bnep_data_ind by Jack He · 6 years ago
  49. afa795e Decrease length after reading from array in process_service_attr_req by Jakub Pawlowski · 6 years ago
  50. 0f2114c DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 6 years ago
  51. 44abe6a DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event by Hansong Zhang · 6 years ago
  52. f77d073 GATT: Handle too short Error Response PDU by Jakub Pawlowski · 6 years ago
  53. cf09e21 Add PDU size checks in process_service_search_attr_rsp by Jakub Pawlowski · 6 years ago
  54. 2d05b8d RESTRICT AUTOMERGE: Fixes two bluetooth causing remote overreads (2/2) by akirilov · 6 years ago
  55. 0069d85 RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2) by akirilov · 6 years ago
  56. 5c46343 DO NOT MERGE: Check number of attributes before writing to a buffer by Ajay Panicker · 6 years ago
  57. 7786752 DO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SETTING_CHANGE by Hansong Zhang · 6 years ago
  58. 6631950 DO NOT MERGE Prevent stack overflow in btif_storage by Hansong Zhang · 6 years ago
  59. 7f030f5 DO NOT MERGE: Add bounds check to l2cble_process_sig_cmd L2CAP_CMD_DISC_REQ by Ajay Panicker · 6 years ago
  60. 9aa9892 DO NOT MERGE Fix unexpected behavior in smp_sm_event by Hansong Zhang · 6 years ago
  61. 95faa35 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 6 years ago
  62. 21b1ed5 DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 6 years ago
  63. b602c6f DO NOT MERGE Add bounds check for BNEP_Write by Hansong Zhang · 6 years ago
  64. 2674d23 DO NOT MERGE Handle bad packet length in gatts_process_read_req by Stanley Tng · 6 years ago
  65. dc85138 DO NOT MERGE Drop LE CoC fragments when frame size is too big by Stanley Tng · 6 years ago
  66. 9f58b5b DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback by Myles Watson · 6 years ago
  67. 530d9e6 DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result by Hansong Zhang · 6 years ago
  68. 8204e72 DO NOT MERGE: AVRCP: Check number of text attribute values in response by Ajay Panicker · 6 years ago
  69. 4e42eb8 DO NOT MERGE Truncate new line characters when adding string to config by Hansong Zhang · 6 years ago
  70. f7c12a7 DO NOT MERGE: AVRCP: Check number of text attributes in response by Ajay Panicker · 6 years ago
  71. 6b1dc2e DO NOT MERGE: AVRCP: Initialize buffer for attribute values to be written to by Ajay Panicker · 6 years ago
  72. 44b63bd DO NOT MERGE: SDP: Check p_req_end before reading from p_req by Myles Watson · 6 years ago
  73. 7e1b22f PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback by Myles Watson · 6 years ago
  74. 69ea631 BNEP: Check received frame type by Myles Watson · 6 years ago
  75. 9dbc614 SDP: Pass the bounds to process_service_*_rsp by Myles Watson · 6 years ago
  76. 36cefa8 Allocate/free the SDP connection timers only during stack startup/shutdown by Pavlin Radoslavov · 6 years ago
  77. 0b4fa10 DO NOT MERGE Fix unexpected behavior in reading BNEP packets by Hansong Zhang · 6 years ago
  78. 5fdcaea DO NOT MERGE Remove memory reference to invalid mem in error log by Stanley Tng · 6 years ago
  79. 6a21cdf DO NOT MERGE: AVRCP: Check the number of text value attributes requested by Ajay Panicker · 6 years ago
  80. 61c0946 DO NOT MERGE: AVRCP: Check the number of text attributes requested by Ajay Panicker · 6 years ago
  81. 5bfbaa0 DO NOT MERGE Fix unexpected behavior in SDP by Hansong Zhang · 6 years ago
  82. 2571ae8 Removed alarm callback execution statistics by Pavlin Radoslavov · 6 years ago
  83. ae69f55 Read the correct amount of attributes by Scott Bauer · 7 years ago
  84. 8496cf1 SDP: Bounds check 'id' parameter for free_sdp_slot() by Andre Eisenbach · 7 years ago
  85. 42dc9df Add missing extension length check while parsing BNEP control packets by Pavlin Radoslavov · 7 years ago
  86. 83faf6a Free p_pending_data from tBNEP_CONN to avoid potential memory leaks by Pavlin Radoslavov · 7 years ago
  87. 7d368a6 Add a missing check for PAN buffer size before copying data by Pavlin Radoslavov · 7 years ago
  88. 87416af Disable PAN Reverse Tethering when connection originated by the Remote by Pavlin Radoslavov · 7 years ago
  89. cdefa50 Allocate buffers of the right size when BT_HDR is included by Pavlin Radoslavov · 7 years ago
  90. 6c8432e Add missing packet length checks while parsing BNEP control packets by Pavlin Radoslavov · 7 years ago
  91. ae95903 Add missing continuation offset check for SDP continuation requests by Pavlin Radoslavov · 7 years ago
  92. e6e5e7f Check LE advertising data length before caching advertising records by Jack He · 7 years ago
  93. 09e0687 DO NOT MERGE resolve merge conflicts of a3ee2e35 to nyc-dev by Pavlin Radoslavov · 7 years ago
  94. 5a99257 Corrected default value assignments in Bluetooth A2DP Metrics by Jack He · 7 years ago
  95. 7ab4b59 Fix A2DP Metrics Logging Capacity by Jack He · 7 years ago
  96. 117ffc2 Fix NPE when discovering invalid GATT datatbase by Jakub Pawlowski · 7 years ago
  97. a3542f9 Merge "Serialize stack shutdown, state change callback and cleanup" into cw-f-dev by Jacky Cheung · 7 years ago
  98. 4f92ffd Serialize stack shutdown, state change callback and cleanup am: 352b8e89ea by Gurpreet Ghai · 7 years ago
  99. 718b632 Merge "Serialize stack shutdown, state change callback and cleanup" into cw-f-dev by Jacky Cheung · 7 years ago
  100. de24e22 resolve merge conflicts of 316589aa to nyc-mr2-dev by Andre Eisenbach · 7 years ago