1. 9e22fb3 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 6 months ago
  2. 8be2f1b Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 7 months ago
  3. 2209109 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 6 months ago
  4. baf8421 Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 6 months ago
  5. e0126c6 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 8 months ago
  6. b370c30 Revert "Revert "Fix wrong BR/EDR link key downgrades (P_256->P_192)"" by Brian Delwiche · 1 year, 8 months ago
  7. a063539 Revert "Revert "[RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 8 months ago
  8. 140d499 Prevent use-after-free of HID reports by Brian Delwiche · 2 years, 1 month ago
  9. 1671d8e Fix OOB access in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years ago
  10. 5f07777 Revert "Fix OOB access in avdt_scb_hdl_pkt_no_frag" by Bharath · 1 year, 8 months ago
  11. f138895 Fix an OOB bug in register_notification_rsp by Hui Peng · 1 year, 10 months ago
  12. b6e04a6 Fix OOB access in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years ago
  13. 9c7feee Fix an OOB write in SDP_AddAttribute by Hui Peng · 1 year, 11 months ago
  14. e0c6fa5 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 1 year, 11 months ago
  15. f3046d1 Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 1 year, 11 months ago
  16. 1a40ba5 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 2 months ago
  17. e9c471f Report failure when not able to connect to AVRCP by Brian Delwiche · 2 years ago
  18. 2a7ab5c AVDTP: Fix a potential overflow about the media payload offset by Mayank Madhukar · 2 years, 4 months ago rel/11/fp3/8901.4.A.0019 rel/11/fp3/8901.4.A.0019.1 rel/11/fp3/8901.4.A.0019.2
  19. 08ab03f Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years ago
  20. decde98 Fix integer overflow when parsing avrc response by Keith Mok · 2 years, 3 months ago
  21. 3257380 Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 3 months ago
  22. 6a3bfd0 Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 3 months ago
  23. 5e6d7ef RESTRICT AUTOMERGE Added max buffer length check by Brian Delwiche · 2 years, 3 months ago
  24. cca4467 Add length check when copy AVDTP packet by Ted Wang · 2 years, 3 months ago
  25. 4740963 Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years, 1 month ago
  26. 7d7777d Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 3 months ago
  27. cf71dd2 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 3 months ago
  28. ada5a72 Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years, 2 months ago rel/11/fp3/8901.4.A.0017 rel/11/fp3/8901.4.A.0017.3
  29. da0c8cc Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 8 months ago
  30. 0a96d85 Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years, 4 months ago rel/11/fp3/8901.4.A.0016 rel/11/fp3/8901.4.A.0016.6
  31. d211483 Removing bonded device when auth fails due to missing keys by Roopa Sattiraju · 2 years, 6 months ago
  32. be15209 Merge tag 'android-security-11.0.0_r57' into int/11/fp3 by Bharath · 2 years, 4 months ago
  33. f1c64a1 Merge cherrypicks of [17777136, 18119099, 18030834] into security-aosp-rvc-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  34. 334a26d Security: Fix out of bound read in AT_SKIP_REST by Josh Wu · 2 years, 7 months ago
  35. dcb1955 Check Avrcp packet vendor length before extracting length by William Escande · 2 years, 7 months ago
  36. c9ea545 Security: Fix out of bound write in HFP client by Chen Chen · 2 years, 7 months ago
  37. 75b1335 Revert "Reset the IRK after all devices are unpaired" by Karsten Tausche · 2 years, 8 months ago
  38. 944bc6e Merge tag 'android-security-11.0.0_r54' into int/11/fp3 by Bharath · 2 years, 6 months ago
  39. 25d7e7a Merge cherrypicks of [16631783] into security-aosp-rvc-release. by Android Build Coastguard Worker · 2 years, 9 months ago
  40. 25a8855 Security fix OOB read due to invalid count in stack/avrc/avrc_pars_ct by Ted Wang · 2 years, 10 months ago
  41. 7e5c63c Merge cherrypicks of [16215817, 16232311] into security-aosp-rvc-release. by Android Build Coastguard Worker · 3 years ago
  42. 069f2e6 Reset the IRK after all devices are unpaired by Martin Brabham · 3 years, 1 month ago
  43. de6e378 security: Use-After-Free in btm_sec_[dis]connected by Chris Manton · 3 years ago
  44. 41dd135 Merge tag 'android-security-11.0.0_r50' into int/11/fp3 by Karsten Tausche · 3 years ago
  45. 5f84fa9 Merge tag 'android-security-11.0.0_r49' into int/11/fp3 by Karsten Tausche · 3 years ago
  46. e4fe647 Merge tag 'android-11.0.0_r48' into int/11/fp3 by Karsten Tausche · 3 years ago
  47. 1baedfb Merge cherrypicks of [16010620, 16011373, 16011377, 16011394, 16011395, 16011396, 16011398, 16011400, 16011402, 16012407, 16010623, 16011574, 16011575, 16010923, 16011434, 16011691, 16011382, 16011383, 16011303, 16011385, 16011579] into security-aosp-rvc-release by Android Build Coastguard Worker · 3 years, 1 month ago
  48. 19932a5 osi: Prevent memory allocations with MSB set by Chris Manton · 3 years, 2 months ago
  49. 0f8ff60 Merge 907359f242cd9ebc37d073234373d29bd52acaeb on remote branch by Linux Build Service Account · 3 years, 4 months ago
  50. 907359f Snap for 7546773 from 482e0447bbe25f57f62cd9cbfc1c245637dd7799 to r-keystone-qcom-release by Android Build Coastguard Worker · 3 years, 4 months ago
  51. 482e044 Merge mpr-2021-07-05 by Eric Arseneau · 3 years, 4 months ago
  52. 30098cc Merge cherrypicks of [15172584, 15172286, 15172594, 15172385, 15172631, 15172632, 15172633, 15172634, 15171221, 15171222, 15171223, 15171541, 15171542, 15171668, 15172342, 15170823, 15170824, 15170825, 15170826, 15170827, 15170828, 15170829, 15172650, 15172651, 15172652, 15172653, 15172654, 15172655, 15172656, 15172657, 15172658, 15172659, 15172660, 15172661, 15172386, 15172387, 15172388, 15172389, 15172670, 15172553, 15172589, 15172343, 15172617, 15172618, 15172619, 15172620, 15172690, 15172691, 15172692, 15172693, 15172694, 15172695, 15172696, 15172697, 15171708, 15171709, 15172554, 15172555, 15172710, 15172621, 15172635, 15172636, 15172698, 15172699, 15172700, 15171543, 15172701, 15172702, 15172703, 15172704, 15171669, 15172622] into rvc-d2-release by Android Build Coastguard Worker · 3 years, 5 months ago
  53. 10f7c3b SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years, 5 months ago
  54. 98082ad Fix memory overflow. by Richard Smith · 3 years, 9 months ago
  55. 0521ce6 Merge cherrypicks of [15151698, 15151719, 15151903, 15151905, 15151907, 15151908, 15151950, 15151952, 15151953, 15151954, 15151955, 15151956, 15151958, 15151937, 15151938, 15151939, 15151860, 15151990, 15151977, 15151978, 15151979] into security-aosp-rvc-release by Android Build Coastguard Worker · 3 years, 5 months ago
  56. 4f99668 SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years, 5 months ago
  57. f32b677 Merge 9a42cce273ece2c0c180e7bf24ffb099b3c15ce5 on remote branch by Linux Build Service Account · 3 years, 5 months ago
  58. 8fc6a61 Snap for 7453952 from d44ab6f6693c34879576043bab6f70c3878b699a to r-keystone-qcom-release by Android Build Coastguard Worker · 3 years, 5 months ago
  59. d44ab6f Merge mpr-2021-06-05 by Eric Arseneau · 3 years, 5 months ago
  60. c6e1424 Merge cherrypicks of [14651914, 14651880, 14651759, 14652210, 14651594, 14651881, 14651915, 14651882, 14651883, 14651799, 14652154, 14651595, 14651760, 14652271, 14652272, 14652273, 14652056, 14651800, 14651801, 14651802, 14651884, 14651885, 14651886, 14652274, 14652275, 14652276, 14652277, 14652278, 14651894, 14651723, 14652211, 14651895, 14651916, 14651887, 14651888, 14651596, 14651889, 14652212, 14651761, 14652310, 14652311, 14651973, 14651974, 14652312, 14652313, 14651896, 14651803] into rvc-qpr3-release by android-build-team Robot · 3 years, 6 months ago
  61. fa1c635 Fix memory overflow. by Richard Smith · 3 years, 9 months ago
  62. 3434883 Merge cherrypicks of [14551043, 14550658, 14550659, 14550660, 14550661, 14552046, 14554284, 14554486, 14552047, 14554032, 14554033, 14554034, 14554035, 14554036, 14554037, 14554038, 14554039, 14550926, 14554040, 14554341, 14554662, 14554041] into security-aosp-rvc-release by android-build-team Robot · 3 years, 6 months ago
  63. b58e324 Fix memory overflow. by Richard Smith · 3 years, 9 months ago
  64. 9a42cce Snap for 7352976 from 603ad2c8c37357968ef346e654c0b159836e8101 to r-keystone-qcom-release by Android Build Role Account android-build-prod · 3 years, 6 months ago
  65. 603ad2c [automerger skipped] Check Classic key before cross-key derivation skipped: f20f31e978 by venkata Jagadeesh garaga · 3 years, 6 months ago
  66. f20f31e Check Classic key before cross-key derivation by Chen Chen · 4 years, 2 months ago
  67. 6942ba7 Snap for 7338618 from 401f2b7b1112b126b6217eeb916e824472c23d8f to r-keystone-qcom-release by Android Build Role Account android-build-prod · 3 years, 7 months ago
  68. 401f2b7 Merge mpr-2021-05-05 by Eric Arseneau · 3 years, 7 months ago
  69. f56847b Merge 0318c0dd9c590785eb7c196af41baee3aafdc5c3 on remote branch by Linux Build Service Account · 3 years, 7 months ago
  70. 0318c0d Snap for 7269540 from d0dbfc54b40bb21d772f088ad514480bab714357 to r-keystone-qcom-release by Android Build Role Account android-build-prod · 3 years, 7 months ago
  71. 53be482 Merge cherrypicks of [14129459, 14130267, 14129460, 14130198, 14130202, 14130204, 14130305, 14130306, 14130307, 14129440, 14129442, 14129443, 14129735, 14129736, 14129737, 14129738, 14129739, 14129444, 14130346, 14129741, 14130347, 14130348, 14129742, 14130349, 14130350, 14130351, 14130352, 14130244, 14129743, 14129744, 14130365, 14130037, 14130321, 14130322, 14130323, 14130324, 14130405] into security-aosp-rvc-release by android-build-team Robot · 3 years, 7 months ago
  72. 3cce102 RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write by Chris Manton · 3 years, 8 months ago
  73. 2f92ff9 Check packet size in avrc_pars_browse_rsp by Hansong Zhang · 3 years, 9 months ago
  74. 48f5cd4 AVRCP: pass bdaddr by value when use SdpCb by Chienyuan · 3 years, 9 months ago
  75. 7c53ee5 smp: Use SMP_TRACE_WARNING by Myles Watson · 3 years, 9 months ago
  76. 776ec9a smp: Reject pairing if the public keys match by Myles Watson · 3 years, 9 months ago
  77. d0dbfc5 Merge mpr-2021-04-05 by Eric Arseneau · 3 years, 7 months ago
  78. e7d575f Snap for 7266183 from ad7f1f6f281585177d2563d66d21325257f35101 to rvc-qpr3-release by android-build-team Robot · 3 years, 7 months ago
  79. c34f33c Snap for 7266183 from ad7f1f6f281585177d2563d66d21325257f35101 to rvc-d2-release by android-build-team Robot · 3 years, 7 months ago
  80. cbd7628 Snap for 7262953 from 0e4254ae237e0cf558f88fa098628ecc355f13cc to rvc-d2-release by android-build-team Robot · 3 years, 7 months ago
  81. ad7f1f6 RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write am: 4deeb022c7 by Chris Manton · 3 years, 7 months ago
  82. bf9310d RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write by Chris Manton · 3 years, 8 months ago
  83. 4deeb02 RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write by Chris Manton · 3 years, 8 months ago
  84. a739df8 Snap for 7255997 from 0e4254ae237e0cf558f88fa098628ecc355f13cc to rvc-qpr3-release by android-build-team Robot · 3 years, 8 months ago
  85. 0e4254a Merge "Check packet size in avrc_pars_browse_rsp" into rvc-dev am: 05401e8739 by TreeHugger Robot · 3 years, 8 months ago
  86. 05401e8 Merge "Check packet size in avrc_pars_browse_rsp" into rvc-dev by TreeHugger Robot · 3 years, 8 months ago
  87. 46fd237 Snap for 7252659 from 34fcdf910843eb2cb193a9187e49bc1cf444b54d to rvc-qpr3-release by android-build-team Robot · 3 years, 8 months ago
  88. 34fcdf9 AVRCP: pass bdaddr by value when use SdpCb am: 71c573ae67 by Chienyuan · 3 years, 8 months ago
  89. cf684c0 Merge cherrypicks of [13924074, 13924075, 13924587, 13923962, 13924417, 13924418, 13924419, 13923941, 13924588, 13923901, 13923902, 13924076, 13924077, 13924420, 13924421, 13924422, 13924423, 13924424, 13924645, 13924589, 13922107, 13924332, 13924333, 13924334, 13924335, 13924336, 13924665, 13923963, 13924646, 13924590, 13924666, 13923971, 13923942] into rvc-qpr2-release by android-build-team Robot · 3 years, 8 months ago
  90. a2b8677 DO NOT MERGE Add mutex for std::map in btif_av.cc by Chienyuan · 3 years, 10 months ago
  91. 2cafe07 avrcp: Ignore AVCT commands that are too long by Myles Watson · 3 years, 9 months ago
  92. 5f3b168 smp: Use SMP_TRACE_WARNING by Myles Watson · 3 years, 9 months ago
  93. 3ad001d smp: Reject pairing if the public keys match by Myles Watson · 3 years, 9 months ago
  94. a632a66 btif: Return after closing the socket by Myles Watson · 3 years, 10 months ago
  95. 59d5aad Snap for 7214043 from 11cefea9750a94830fc12ca3f801378d90eb2ea5 to r-keystone-qcom-release by Android Build Role Account android-build-prod · 3 years, 8 months ago
  96. d02ba82 avrcp: Ignore AVCT commands that are too long by Myles Watson · 3 years, 9 months ago
  97. 98336e6 btif: Return after closing the socket by Myles Watson · 3 years, 10 months ago
  98. a4584a9 DO NOT MERGE Add mutex for std::map in btif_av.cc by Chienyuan · 3 years, 10 months ago
  99. 71c573a AVRCP: pass bdaddr by value when use SdpCb by Chienyuan · 3 years, 9 months ago
  100. 11cefea Merge spl-2021-03-05 by Eric Arseneau · 3 years, 8 months ago