Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / system / bt / refs/heads/int/10/fp2 / stack
  1. 8679997 Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Bharath · 1 year, 4 months ago int/10/fp2 rel/10/fp2/23.02.0-rel rel/10/fp2/23.02.0-rel.0
  2. 173f238 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 1 year, 8 months ago
  3. 64cd18f Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 1 year, 7 months ago rel/10/fp2/22.12.0-rel rel/10/fp2/22.12.0-rel.0
  4. 2508318 Fix integer overflow when parsing avrc response by Keith Mok · 1 year, 10 months ago
  5. b81b232 Add length check when copy AVDT and AVCT packet by Keith Mok · 1 year, 10 months ago
  6. d37419b Add missing increment in bnep_api.cc by Brian Delwiche · 1 year, 9 months ago
  7. d4a90db RESTRICT AUTOMERGE Added max buffer length check by Brian Delwiche · 1 year, 9 months ago
  8. f5a07b7 Add length check when copy AVDTP packet by Ted Wang · 1 year, 10 months ago
  9. ced6c9b Add negative length check in process_service_search_rsp by Brian Delwiche · 1 year, 10 months ago
  10. 324ef58 Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 1 year, 8 months ago rel/10/fp2/22.10.0-rel rel/10/fp2/22.10.0-rel.0
  11. ba9a7ee Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 2 months ago
  12. a554e1c Merge branch 'dev/10/fp2/security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 1 year, 11 months ago rel/10/fp2/22.08.0-rel rel/10/fp2/22.08.0-rel.0
  13. 8b644d9 Check Avrcp packet vendor length before extracting length by William Escande · 2 years, 1 month ago
  14. 439ccf0 Merge branch 'security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 2 years, 2 months ago rel/10/fp2/22.04.0-rel rel/10/fp2/22.06.0-rel rel/10/fp2/22.04.0-rel.1 rel/10/fp2/22.06.0-rel.0
  15. 8c6477c Security fix OOB read due to invalid count in stack/avrc/avrc_pars_ct by Ted Wang · 2 years, 5 months ago
  16. 9703efc Merge branch 'security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 2 years, 5 months ago rel/10/fp2/22.02.0-rel rel/10/fp2/22.02.0-rel.0
  17. 4bcc8f4 security: Use-After-Free in btm_sec_[dis]connected by Chris Manton · 2 years, 7 months ago
  18. 3304538 Merge branch 'security-aosp-qt-release' into int/10/fp2 by Maarten Derks · 2 years, 8 months ago
  19. a3afff7 Fix L version ble_vendor_capability sanity check crash. by Ted Wang · 4 years, 10 months ago
  20. ae1e316 Merge tag 'android-security-10.0.0_r56' into int/10/fp2 by Karsten Tausche · 2 years, 9 months ago
  21. d2dd688 Merge tag 'android-security-10.0.0_r55' into int/10/fp2 by Karsten Tausche · 2 years, 9 months ago
  22. 6691446 Merge tag 'android-security-10.0.0_r54' into int/10/fp2 by Karsten Tausche · 2 years, 9 months ago
  23. 1deec77 Merge tag 'android-security-10.0.0_r53' into int/10/fp2 by Karsten Tausche · 2 years, 9 months ago
  24. 5c72690 SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years ago
  25. 9446887 Fix memory overflow. by Richard Smith · 3 years, 3 months ago
  26. 72ee2f7 RESTRICT AUTOMERGE Contain avrc_ctrl_pars_vendor_cmd OOB write by Chris Manton · 3 years, 2 months ago
  27. c28ac24 smp: Use SMP_TRACE_WARNING by Myles Watson · 3 years, 3 months ago
  28. bb0ae6b smp: Reject pairing if the public keys match by Myles Watson · 3 years, 4 months ago
  29. 6ddf312 smp: Use SMP_TRACE_WARNING by Myles Watson · 3 years, 3 months ago
  30. 0e64344 avrcp: Ignore AVCT commands that are too long by Myles Watson · 3 years, 4 months ago
  31. 76da71c smp: Reject pairing if the public keys match by Myles Watson · 3 years, 4 months ago
  32. 931873c AVRCP: Use calloc to zero reserved fields by Myles Watson · 3 years, 6 months ago
  33. dfe277c avrc_copy_packet: Zero initialize packet by Hansong Zhang · 3 years, 6 months ago
  34. 09ec6a0 Legacy pairing: Reject device with same BD_ADDR by Hansong Zhang · 3 years, 6 months ago
  35. e7305d9 Fix potential OOB write in libbluetooth by Ted Wang · 3 years, 8 months ago
  36. 65502ea Fix a security issue in sdp_server.cc by Hansong Zhang · 3 years, 8 months ago
  37. e99896d Check Classic key before cross-key derivation by Chen Chen · 3 years, 8 months ago
  38. 3a85188 Send a response to an smp security request depending on the callback event by Rahul Sabnis · 3 years, 9 months ago
  39. 6d3ae14 Return after removing sample LTK device by li-wei.cheng · 4 years, 5 months ago
  40. d298c89 Check whether local device is an ATV device to determine whether to show by Rahul Sabnis · 3 years, 10 months ago
  41. 2ec4767 Shows a consent dialog on the local device when pairing a bluetooth low by Rahul Sabnis · 4 years ago
  42. 3fd0365 Fix possible OOB when receive gatt read type response data by weichinweng · 3 years, 10 months ago
  43. 6f5dae5 Remove pairing on incoming bond request by Myles Watson · 4 years ago
  44. 634f0e4 Check a2dp packet length is zero by Chris Manton · 4 years, 3 months ago
  45. 72980ee Fix potential stack overflow caused by integer overflow by Jakub Pawlowski · 4 years, 3 months ago
  46. aeeb427 Merge "btm: fixing oob write in multi-adv SetData." into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  47. 8ccc0c8 Fix potential stack overflow caused by integer overflow am: ec0d507ed2 by Jakub Pawlowski · 4 years, 2 months ago
  48. ee0e886 Merge "Fix potential OOB vulnerability when an HCI event is received" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  49. f021675 Merge "AVDTP: Prevent OOB read when parsing rejected response" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  50. ec0d507 Fix potential stack overflow caused by integer overflow by Jakub Pawlowski · 4 years, 3 months ago
  51. 49437a6 Merge "avrc: Validating msg size before accessing fields" into qt-qpr1-dev by TreeHugger Robot · 4 years, 3 months ago
  52. b204c00 Merge changes from topic "AutomotiveQBTSync" into qt-qpr1-dev by Joseph Pirozzo · 4 years, 3 months ago
  53. 1afad05 Fix potential OOB vulnerability when an HCI event is received by jonerlin · 4 years, 3 months ago
  54. 64ffb61 Notify remote name failed for LE device by More Kuo · 4 years, 3 months ago
  55. 9e5e9c0 AVRCP Controller get play status by Joseph Pirozzo · 4 years, 8 months ago
  56. f4fb3ef AAC Decoder: Use osi_free() to free buffers allocated by osi_malloc() by Hansong Zhang · 4 years, 4 months ago
  57. 9098e2a avrc: Validating msg size before accessing fields by Alain Michaud · 4 years, 4 months ago
  58. 7362ab9 btm: fixing oob write in multi-adv SetData. by Alain Michaud · 4 years, 4 months ago
  59. 0dd50b2 AAC Decoder: Use osi_free() to free buffers allocated by osi_malloc() am: 7a6fd5459e am: c4d6c95107 by Automerger Merge Worker · 4 years, 3 months ago
  60. c4d6c95 AAC Decoder: Use osi_free() to free buffers allocated by osi_malloc() am: 7a6fd5459e by Automerger Merge Worker · 4 years, 3 months ago
  61. 7a6fd54 AAC Decoder: Use osi_free() to free buffers allocated by osi_malloc() by Hansong Zhang · 4 years, 4 months ago
  62. 315848a AVDTP: Prevent OOB read when parsing rejected response by Cheney Ni · 4 years, 4 months ago
  63. cbbad7a SDP: add return after SDP disconnection by Zongheng Wang · 4 years, 7 months ago
  64. fb4b5eb Merge "L2CAP: Check length for packet before connection complete" into qt-qpr1-dev by TreeHugger Robot · 4 years, 6 months ago
  65. 8aba91a Merge "HCI: Check length of connection complete event" into qt-qpr1-dev by Mike Logan · 4 years, 6 months ago
  66. 10ca85c Merge "L2CAP: Bounds check num_handles in NumCompletedPackets" into qt-qpr1-dev by TreeHugger Robot · 4 years, 6 months ago
  67. 4d6e424 Merge "Fix potential OOB when parsing inquiry results" into qt-qpr1-dev by TreeHugger Robot · 4 years, 6 months ago
  68. 0c3b124 L2CAP: Check length for packet before connection complete by Hansong Zhang · 4 years, 8 months ago
  69. 12878c7 VSC batch scan: Check packet length by Hansong Zhang · 4 years, 8 months ago
  70. bdad5e7 L2CAP: Bounds check num_handles in NumCompletedPackets by Myles Watson · 4 years, 8 months ago
  71. 856262c HCI: Check length of connection complete event by Myles Watson · 4 years, 8 months ago
  72. 153e2d5 Fix potential OOB when parsing inquiry results by Jakub Pawlowski · 4 years, 8 months ago
  73. 9eda71d Fix potential OOB write in btm_read_remote_ext_features_complete by Ted Wang · 4 years, 6 months ago
  74. 5f1bca6 Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into pi-dev am: 7f3b214ec9 by Automerger Merge Worker · 4 years, 6 months ago
  75. 7f3b214 Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into pi-dev by TreeHugger Robot · 4 years, 6 months ago
  76. c3af1c8 Merge "SDP: add return after SDP disconnection" into oc-dev am: 765abc5cb6 am: 1f3bc32195 am: 52cd67a7de am: 6ef3486983 am: 7b3e597303 am: ed89932fdc by Automerger Merge Worker · 4 years, 6 months ago
  77. 7b3e597 Merge "SDP: add return after SDP disconnection" into oc-dev am: 765abc5cb6 am: 1f3bc32195 am: 52cd67a7de am: 6ef3486983 by Automerger Merge Worker · 4 years, 6 months ago
  78. 6ef3486 Merge "SDP: add return after SDP disconnection" into oc-dev am: 765abc5cb6 am: 1f3bc32195 am: 52cd67a7de by Automerger Merge Worker · 4 years, 6 months ago
  79. 52cd67a Merge "SDP: add return after SDP disconnection" into oc-dev am: 765abc5cb6 am: 1f3bc32195 by Automerger Merge Worker · 4 years, 6 months ago
  80. 1f3bc32 Merge "SDP: add return after SDP disconnection" into oc-dev am: 765abc5cb6 by Automerger Merge Worker · 4 years, 6 months ago
  81. 765abc5 Merge "SDP: add return after SDP disconnection" into oc-dev by TreeHugger Robot · 4 years, 6 months ago
  82. 2aa92f8 Fix potential OOB write in btm_read_remote_ext_features_complete by Ted Wang · 4 years, 6 months ago
  83. 140d829 Fix potential OOB write in btm_read_remote_ext_features_complete by Ted Wang · 4 years, 6 months ago
  84. 2908ff6 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into oc-dev am: aa754ed3ec am: 53afb387a4 am: a651e35ad0 am: 91f38752fa am: 9d7aa50fb7 by Ted Wang · 4 years, 6 months ago
  85. 9d7aa50 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into oc-dev am: aa754ed3ec am: 53afb387a4 am: a651e35ad0 am: 91f38752fa by Automerger Merge Worker · 4 years, 6 months ago
  86. 91f3875 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into oc-dev am: aa754ed3ec am: 53afb387a4 am: a651e35ad0 by Automerger Merge Worker · 4 years, 6 months ago
  87. a651e35 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into oc-dev am: aa754ed3ec am: 53afb387a4 by Automerger Merge Worker · 4 years, 6 months ago
  88. 53afb38 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into oc-dev am: aa754ed3ec by Automerger Merge Worker · 4 years, 6 months ago
  89. 5d42028 Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into qt-dev am: db7ae0ecc0 by Ted Wang · 4 years, 6 months ago
  90. db7ae0e Merge "Revert "Fix potential OOB write in btm_read_remote_ext_features_complete"" into qt-dev by Ted Wang · 4 years, 6 months ago
  91. 5edd605 SDP: add return after SDP disconnection by Zongheng Wang · 4 years, 7 months ago
  92. 246034a Revert "Fix potential OOB write in btm_read_remote_ext_features_complete" by Adam Seaton · 4 years, 7 months ago
  93. 247c64e Revert "Fix potential OOB write in btm_read_remote_ext_features_complete" by Adam Seaton · 4 years, 7 months ago
  94. bfc50d0 Add protection to prevent null pointer dereference. by jonerlin · 4 years, 7 months ago
  95. 4b70005 Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into oc-dev by Ted Wang · 4 years, 7 months ago
  96. e5b9129 Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into oc-mr1-dev am: 82e29feb42 am: 0b3d1dd9a9 am: ea5f6b522e by Ted Wang · 4 years, 7 months ago
  97. ea5f6b5 Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into oc-mr1-dev am: 82e29feb42 by Ted Wang · 4 years, 7 months ago
  98. 0b3d1dd Merge "Fix potential OOB write in btm_read_remote_ext_features_complete" into oc-mr1-dev by Ted Wang · 4 years, 7 months ago
  99. a407676 SDP: Disconnect when there is a bad length by Zongheng Wang · 4 years, 10 months ago
  100. dc22bc9 SDP: disconnect if sdp_copy_raw_data fails by Zongheng Wang · 4 years, 10 months ago