- c5fff7f Merge the 2019-08-01 SPL branch from AOSP-Partner by Karsten Tausche · 4 years, 10 months ago int/n/fp2
- 2acb8e2 Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" by Arjun Garg · 4 years, 10 months ago
- 4d57cc3 DO NOT MERGE Fix for Bluetooth connection being dropped after HCI Read Encryption Key Size by Jakub Pawlowski · 5 years ago
- 669c21e DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 5 years ago
- 1a82722 DO NOT MERGE Send HCI Read Encryption Key properly by Jakub Pawlowski · 5 years ago
- 0308024 DO NOT MERGE Fix potential OOB read in sdpu_get_len_from_type by Ted Wang · 5 years ago
- 89674a2 DO NOT MERGE Don't persist bonds using sample LTK by Jakub Pawlowski · 5 years ago
- a59a379 DO NOT MERGE Drop Bluetooth connection with weak encryption key by Jakub Pawlowski · 5 years ago
- 7e8f6ce Merge the 2019-04-01 SPL branch from AOSP-Partner by Karsten Tausche · 5 years ago
- 31df47a Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" by JP Sugarbroad · 5 years ago
- 621fc01 DO NOT MERGE Fix length for L2CAP config type EXT FLOW by Hansong Zhang · 5 years ago
- 98ed90c DO NOT MERGE btm_proc_smp_cback: Don't access p_dev_rec if freed by Hansong Zhang · 5 years ago
- 5dd354b DO NOT MERGE process_l2cap_cmd: Fix OOB by Hansong Zhang · 5 years ago
- 5cd6a9f DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 6 years ago
- b484579 Merge the 2019-01-05 SPL branch from AOSP-Partner by Karsten Tausche · 5 years ago
- ae00180 Revert "AG: Clear the memory before using it" by Karsten Tausche · 5 years ago
- 2736fbc DO NOT MERGE A security fix to check buffer length in l2c_lcc_proc_pdu by Stanley Tng · 5 years ago
- 4a71fca Fix buffer overflow in btif_dm_data_copy by Jakub Pawlowski · 5 years ago
- 9f9bbcf Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm by Jakub Pawlowski · 5 years ago
- 9d3a7b2 DO NOT MERGE HFP: Check AT command buffer boundary during parsing by Chienyuan · 6 years ago
- bf3d4f6 DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr by Myles Watson · 6 years ago
- 2fbc0f1 DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp by Myles Watson · 6 years ago
- 8ec7232 DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act by Myles Watson · 6 years ago
- 8dee3a4 DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data by Ugo Yu · 6 years ago
- 7147c33 Fix possible OOB read in process_service_search_rsp by Jakub Pawlowski · 6 years ago
- f049e30 DO NOT MERGE - Check SDU lower bound before allocate p_data by Ugo Yu · 6 years ago
- 5ce9a30 DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() by Pavlin Radoslavov · 6 years ago
- e7e90a7 DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses by Pavlin Radoslavov · 6 years ago
- e71b7da Merge the 2018-09-05 SPL branch from AOSP-Partner by Karsten Tausche · 6 years ago
- f135bc2 DO NOT MERGE Check remaining frame length in rfc_process_mx_message by Hansong Zhang · 6 years ago
- 8a3e6b8 DO NOT MERGE Fix a wrong check in rfc_parse_data by Hansong Zhang · 6 years ago
- 3717ce7 DO NOT MERGE Add bound check for rfc_parse_data by Hansong Zhang · 6 years ago
- 37012f7 DO NOT MERGE Add packet length check in smp_proc_master_id by Ugo Yu · 6 years ago
- 70b6399 Checks the SMP length to fix OOB read by Cheney Ni · 6 years ago
- 9c379f4 Fix copy length calculation in sdp_copy_raw_data by Jakub Pawlowski · 6 years ago
- b8e055b DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback by Pavlin Radoslavov · 6 years ago
- b8cf11d DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req by Cheney Ni · 6 years ago
- f776ede DO NOT MERGE Check packet length in bta_av_proc_meta_cmd by Chienyuan · 6 years ago
- 41f1103 DO NOT MERGE Fix OOB read before buffer length check by Ugo Yu · 6 years ago
- c0d01da DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp by Hansong Zhang · 6 years ago
- 2f425ed DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 6 years ago
- c6216cf DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 6 years ago
- 8efc86e Don't use Address after it was deleted by Jakub Pawlowski · 6 years ago
- 84cf108 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 6 years ago
- c731ffb DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 6 years ago
- 0c0435b SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 6 years ago
- 81d0e32 DO NOT MERGE HFP: Fix out of bound access in phone number processing by Jack He · 6 years ago
- 8a1add8 DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 6 years ago
- d3b4884 Revert "DO NOT MERGE: SDP: Recalculate param_len after max_list_len" by Max Spector · 6 years ago
- 135b23f DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 6 years ago
- 9ee2c32 Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 6 years ago
- 640f001 DO NOT MERGE BNEP: Fix build breakage by using osi_free instead of GKI_freebuf by Jack He · 6 years ago
- b15ae8d BNEP: Fix OOB access in bnep_data_ind by Jack He · 6 years ago
- afa795e Decrease length after reading from array in process_service_attr_req by Jakub Pawlowski · 6 years ago
- 0f2114c DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 6 years ago
- 44abe6a DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event by Hansong Zhang · 6 years ago
- f77d073 GATT: Handle too short Error Response PDU by Jakub Pawlowski · 6 years ago
- cf09e21 Add PDU size checks in process_service_search_attr_rsp by Jakub Pawlowski · 6 years ago
- 2d05b8d RESTRICT AUTOMERGE: Fixes two bluetooth causing remote overreads (2/2) by akirilov · 6 years ago
- 0069d85 RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2) by akirilov · 6 years ago
- 5c46343 DO NOT MERGE: Check number of attributes before writing to a buffer by Ajay Panicker · 6 years ago
- 7786752 DO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SETTING_CHANGE by Hansong Zhang · 6 years ago
- 6631950 DO NOT MERGE Prevent stack overflow in btif_storage by Hansong Zhang · 6 years ago
- 7f030f5 DO NOT MERGE: Add bounds check to l2cble_process_sig_cmd L2CAP_CMD_DISC_REQ by Ajay Panicker · 6 years ago
- 9aa9892 DO NOT MERGE Fix unexpected behavior in smp_sm_event by Hansong Zhang · 6 years ago
- 033821e bt: Fix build when !BTA_AV_SPLIT_A2DP_ENABLED by Borjan Tchakaloff · 6 years ago
- 9cba3b2 Merge tag 'LA.UM.5.8.r1-02900-8x98.0' into int/n/fp2 by Borjan Tchakaloff · 6 years ago
- 21d656e Merge the 2018-05-05 SPL branch from AOSP-Partner into android-7.1.2_r36 by Borjan Tchakaloff · 6 years ago
- 95faa35 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 6 years ago
- 21b1ed5 DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 6 years ago
- b602c6f DO NOT MERGE Add bounds check for BNEP_Write by Hansong Zhang · 6 years ago
- 2674d23 DO NOT MERGE Handle bad packet length in gatts_process_read_req by Stanley Tng · 6 years ago
- dc85138 DO NOT MERGE Drop LE CoC fragments when frame size is too big by Stanley Tng · 6 years ago
- 9f58b5b DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback by Myles Watson · 6 years ago
- 530d9e6 DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result by Hansong Zhang · 6 years ago
- 8204e72 DO NOT MERGE: AVRCP: Check number of text attribute values in response by Ajay Panicker · 6 years ago
- 4e42eb8 DO NOT MERGE Truncate new line characters when adding string to config by Hansong Zhang · 6 years ago
- f7c12a7 DO NOT MERGE: AVRCP: Check number of text attributes in response by Ajay Panicker · 6 years ago
- 6b1dc2e DO NOT MERGE: AVRCP: Initialize buffer for attribute values to be written to by Ajay Panicker · 6 years ago
- 44b63bd DO NOT MERGE: SDP: Check p_req_end before reading from p_req by Myles Watson · 6 years ago
- 7e1b22f PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback by Myles Watson · 6 years ago
- 69ea631 BNEP: Check received frame type by Myles Watson · 6 years ago
- 9dbc614 SDP: Pass the bounds to process_service_*_rsp by Myles Watson · 6 years ago
- 36cefa8 Allocate/free the SDP connection timers only during stack startup/shutdown by Pavlin Radoslavov · 6 years ago
- 0b4fa10 DO NOT MERGE Fix unexpected behavior in reading BNEP packets by Hansong Zhang · 6 years ago
- 5fdcaea DO NOT MERGE Remove memory reference to invalid mem in error log by Stanley Tng · 6 years ago
- 6a21cdf DO NOT MERGE: AVRCP: Check the number of text value attributes requested by Ajay Panicker · 6 years ago
- 61c0946 DO NOT MERGE: AVRCP: Check the number of text attributes requested by Ajay Panicker · 6 years ago
- 5bfbaa0 DO NOT MERGE Fix unexpected behavior in SDP by Hansong Zhang · 6 years ago
- 2571ae8 Removed alarm callback execution statistics by Pavlin Radoslavov · 6 years ago
- c45e5eb Merge cherrypicks of [3166006, 3165952, 3164925, 3164926, 3164927, 3164928, 3167313, 3167314, 3167315, 3167316, 3167317, 3167318, 3167319, 3167320, 3167321, 3167322, 3166318, 3166319, 3166320, 3166321, 3166322, 3166323, 3166324, 3167333, 3167334, 3167373, 3165112, 3166325, 3165229, 3165230] into nyc-mr2-release by android-build-team Robot · 7 years ago
- 87b81e5 Read the correct amount of attributes by Scott Bauer · 7 years ago
- ae69f55 Read the correct amount of attributes by Scott Bauer · 7 years ago
- 79de6a2 Merge 3f46cf6a6ccffd49b1a658be933a394813095a07 on remote branch by Linux Build Service Account · 7 years ago
- 3f46cf6 Promotion of bt.lnx.2.1-00127. by Linux Build Service Account · 7 years ago
- 7f5ea9d Merge cherrypicks of [2973982, 2974657, 2974658, 2973983, 2973984, 2974689, 2974690, 2974691, 2974692, 2974710, 2974711, 2974713, 2974714, 2974215, 2974216, 2974217, 2974218, 2974219, 2974220, 2974729, 2974730, 2974731, 2974732, 2974733, 2974734, 2974735, 2974736, 2974737, 2974738, 2974739, 2974740, 2974741, 2974742, 2974749, 2974750, 2974751, 2974752, 2974753, 2974647, 2974744, 2974693, 2974694, 2974648, 2974513, 2974665, 2974746] into nyc-mr2-release by android-build-team Robot · 7 years ago
- e6560ee SDP: Bounds check 'id' parameter for free_sdp_slot() by Andre Eisenbach · 7 years ago
- c6eef86 Set PCM Depth to 24bit for APTx HD by Ayan Ghosh · 7 years ago
- e604296 Promotion of bt.lnx.2.1-00123. by Linux Build Service Account · 7 years ago
- 19079ea Merge "SDP: Reject sdp service search req with invalid max attr list" into bt.lnx.2.1-dev by CNSS_WLAN Service · 7 years ago