- bcc29eb Fix an integer underflow in build_read_multi_rsp by Hui Peng · 10 months ago odm/rc/qssi/12/fp4
- e6593ae Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 1 month ago
- 2adfc46 Fix UAF in gatt_cl.cc by Brian Delwiche · 12 months ago
- a0672b2 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 1 month ago
- 868e180 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 2 months ago
- 9757560 Revert "Revert "Fix wrong BR/EDR link key downgrades (P_256->P_192)"" by Brian Delwiche · 1 year, 2 months ago
- a8c91ff Revert^2 "Validate buffer length in sdpu_build_uuid_seq" by Brian Delwiche · 1 year, 2 months ago
- c249186 Fix OOB access in avdt_scb_hdl_pkt_no_frag by Hui Peng · 1 year, 6 months ago
- bef30a3 Merge "Fix an OOB write in SDP_AddAttribute" into sm7225_s_fp4_qssi_rc by Fairphone ODM · 1 year, 3 months ago
- c5caa17 Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into sm7225_s_fp4_qssi_rc by Fairphone ODM · 1 year, 3 months ago
- 5e767ff Fix an OOB write in SDP_AddAttribute by Hui Peng · 1 year, 5 months ago
- d7becfa Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 1 year, 5 months ago
- bbbdc72 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 1 year, 5 months ago
- fdcf87f Add bounds check in avdt_scb_act.cc by Brian Delwiche · 1 year, 8 months ago
- 24f3040 Fix integer overflow when parsing avrc response by Keith Mok · 1 year, 10 months ago
- ba3a28f Add length check when copy AVDT and AVCT packet by Keith Mok · 1 year, 10 months ago
- 9d90de6 Add missing increment in bnep_api.cc by Brian Delwiche · 1 year, 9 months ago
- 7c19171 Added max buffer length check by Brian Delwiche · 1 year, 9 months ago
- 7dcb418 Add length check when copy AVDTP packet by Ted Wang · 1 year, 10 months ago
- 2f478bf Add negative length check in process_service_search_rsp by Brian Delwiche · 1 year, 10 months ago
- 52fae08 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 2 months ago
- 2ff58a9 l2cap: Verify number of channels in the CoC request by Łukasz Rymanowski · 2 years ago
- e80f764 Check Avrcp packet vendor length before extracting length by William Escande · 2 years, 1 month ago
- 85c0d14 Fix out of bond write in gatt_db by William Escande · 2 years, 2 months ago
- e82cd6e GATT multi read: account for length for variable length read by Jakub Pawlowski · 2 years, 2 months ago
- 84ac221 Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RES by Chienyuan Huang · 2 years, 4 months ago
- 6a1bc49 Security fix OOB read due to invalid count in stack/avrc/avrc_pars_ct by Ted Wang · 2 years, 5 months ago
- 9b86a16 Security fix for potential OOB read in L2CAP by Chris Manton · 2 years, 4 months ago
- 292e758 Handle bogus multi value packet lengths by Chris Manton · 2 years, 6 months ago
- 30332f8 security: Use-After-Free in btm_sec_[dis]connected by Chris Manton · 2 years, 7 months ago
- 246b0d1 Merge s-mpr-2021-12-05 by Eric Arseneau · 2 years, 5 months ago
- 8b14d59 Merge mpr-2021-11-05 by Eric Arseneau · 2 years, 6 months ago
- b59afca Merge "Make SDP and inquiry request dequeue and execute more comprehensive and cancelDiscovery now removes all queued inquiry requests." into sc-qpr1-dev by TreeHugger Robot · 2 years, 8 months ago
- d241ce1 Make SDP and inquiry request dequeue and execute more comprehensive and by Rahul Sabnis · 2 years, 9 months ago
- 3ffe74d Ensure proper hci le meta event length size by Chris Manton · 2 years, 8 months ago
- d0743fb Security Fix: Crafted GATT request causes BT stack crash by Martin Brabham · 2 years, 9 months ago
- fa21bf4 Update AVRCP default version to 1.5 by Ted Wang · 2 years, 9 months ago
- 43cf5f2 Merge "GATT: Fix data length parameter" into sc-qpr1-dev by TreeHugger Robot · 2 years, 9 months ago
- f451ded GATT: Fix data length parameter by Hansong Zhang · 2 years, 9 months ago
- 1da56d1 Security Fix: Crafted GATT request causes BT stack crash by Martin Brabham · 2 years, 9 months ago
- d2dcfad Merge SP1A.210812.003 by Scott Lobdell · 2 years, 10 months ago
- 33797a6 Stop inquiry when inquiry cancelled by IHLHO KIM · 2 years, 10 months ago
- d559977 Stop inquiry when inquiry cancelled by IHLHO KIM · 2 years, 10 months ago
- 48d8595 Merge SP1A.210803.001 by Scott Lobdell · 2 years, 10 months ago
- ef54174 Merge "Merge SP1A.210723.002" into s-keystone-qcom-dev by Scott Lobdell · 2 years, 10 months ago
- a907659 A2dpSrc: Added support for 32/8KHz(1/2) by Satheesh Kumar Pallemoni · 2 years, 10 months ago
- cb7c6bb Also remove entry during delete in addition to clear by Martin Brabham · 2 years, 10 months ago
- abff1a3 L2CA_RegisterLECoc fix by Hansong Zhang · 2 years, 10 months ago
- 124f286 Merge "Fix L2cap LE COC security record leaks" into sc-dev by TreeHugger Robot · 2 years, 10 months ago
- f4a911c Fix L2cap LE COC security record leaks by Hansong Zhang · 2 years, 10 months ago
- 42df5a1 Merge SP1A.210723.002 by Scott Lobdell · 2 years, 10 months ago
- 5de15fd BTM_PM: Try other pending changes when current one failed by Hansong Zhang · 2 years, 10 months ago
- e2d1b78 Merge SP1A.210709.002 by Haamed Gheibi · 2 years, 11 months ago
- 709a7c1 Merge "A2dpSrc: Align legacy codec enumeration with AOSP(3/7)" into s-keystone-qcom-dev by Treehugger Robot · 2 years, 11 months ago
- 7d54fb0 eatt: Improve handling incoming EATT connection by Łukasz Rymanowski · 3 years ago
- 8eb2d36 eatt: Fix for the crash on incoming channel creation by Łukasz Rymanowski · 3 years ago
- 01915cf stack/gatt: Store GATT server supported features by Łukasz Rymanowski · 4 years, 1 month ago
- 3dc8ae9 eatt: Fix crash on double disconnect by Łukasz Rymanowski · 3 years ago
- b33ab19 eatt: Fix logging by Łukasz Rymanowski · 3 years ago
- f3db9f5 Queue discovery and device inquiry while bonding by Rahul Sabnis · 3 years ago
- 69dab96 Merge changes from topic "bluetooth_oob_api" into sc-dev by TreeHugger Robot · 3 years ago
- 01b1b58 OOB: Replace 'memcpy' with assignments by Martin Brabham · 3 years ago
- 83aa281 OOB: Start advertising when OOB data is generated. by Martin Brabham · 3 years ago
- 2260d86 OOB: Store keys and data generated for local OOB use. by Martin Brabham · 3 years ago
- d697931 OOB: Utilize SMP state machine to generate the OOB data. by Martin Brabham · 3 years ago
- b734572 OOB: Rework create bond out of band flow to not use btif_dm_cb_create_bond by Martin Brabham · 3 years, 1 month ago
- 0628a8e RESTRICT AUTOMERGE Security fix OOB read vuln stack/avrc/avrc_pars_tg by Chris Manton · 3 years, 2 months ago
- f9be837 Merge "SMP: Reject pairing if public_key.x match" into sc-dev by TreeHugger Robot · 3 years ago
- 1fd1f56 SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years ago
- 772c3d9 Remove UNUSED_ATTR from an used parameter by Cheney Ni · 3 years ago
- 0c7c119 Fix: add DelayReport feature when enable AV api by Zyan Wu · 3 years ago
- 6ef0832 Feature: send delay report once configed by Zyan Wu · 3 years, 1 month ago
- 8749fe2 Merge SP1A.210616.001 by Daniel Norman · 3 years ago
- f961265 IRK: Set IRK to resolving list by Martin Brabham · 3 years ago
- 67f83a0 Merge SP1A.210604.001 Change-Id: Ibc6255c773ea94aca76eafd8d9c93d21a30126a4 by Scott Lobdell · 3 years ago
- cd6246d Merge "A2DP: Restrict MTU while using SBC middle quality" into sc-dev by TreeHugger Robot · 3 years ago
- c324b54 Revert "Always unset def L2CAP_CBB_DEFAULT_DATA_RATE_BUFF_QUOTA" by Chris Manton · 3 years ago
- 5964f71 Merge "Ensure we do not send A2DP data to non-active stream devices" into sc-dev by TreeHugger Robot · 3 years ago
- 913ce2f Ensure we do not send A2DP data to non-active stream devices by Rahul Sabnis · 3 years ago
- 05ec436 A2DP: Restrict MTU while using SBC middle quality by Cheney Ni · 3 years ago
- fba2728 AOSP: Correct device type for dual mode peers by Animesh Fatehpuria · 3 years, 3 months ago
- 0440a21 Merge SP1A.210513.004 Change-Id: Idbc1822c79fefa03c56d89648df7fafd43282f7c by Chris Gross · 3 years ago
- ae08ee7 Fix out of bound read in read_reports_cb. by Richard Smith · 3 years, 3 months ago
- e714e4b gatt: Properly gatt register/deregister am: 7672851def am: 02848cc128 am: 81e9c91090 by Chris Manton · 3 years, 1 month ago
- 81e9c91 gatt: Properly gatt register/deregister am: 7672851def am: 02848cc128 by Chris Manton · 3 years, 1 month ago
- b4e6bab gatt: Properly init/free gatt layer am: 3d058ff5e3 am: d0c7dcfe76 am: 327f969fa6 by Chris Manton · 3 years, 1 month ago
- 327f969 gatt: Properly init/free gatt layer am: 3d058ff5e3 am: d0c7dcfe76 by Chris Manton · 3 years, 1 month ago
- 7672851 gatt: Properly gatt register/deregister by Chris Manton · 3 years, 1 month ago
- 3d058ff gatt: Properly init/free gatt layer by Chris Manton · 3 years, 1 month ago
- c409fee avdt_scb: fix dereferences of NULL by George Burgess IV · 3 years, 1 month ago
- 900467c Merge "CTKD: Fix role change bug on legacy BT stack" am: 672131f257 am: 85fc6e6012 am: dfb71cfc7e by Treehugger Robot · 3 years, 1 month ago
- dfb71cf Merge "CTKD: Fix role change bug on legacy BT stack" am: 672131f257 am: 85fc6e6012 by Treehugger Robot · 3 years, 1 month ago
- 672131f Merge "CTKD: Fix role change bug on legacy BT stack" by Treehugger Robot · 3 years, 1 month ago
- a4df700 CTKD: Fix role change bug on legacy BT stack by Animesh Fatehpuria · 3 years, 1 month ago
- 0c4bed1 Merge changes If5f6b231,I8c5eb4bb,I01aa1955 am: 8577c8e621 am: fe5cf7cbf1 am: 6ff137977a by Chris Manton · 3 years, 1 month ago
- 6ff1379 Merge changes If5f6b231,I8c5eb4bb,I01aa1955 am: 8577c8e621 am: fe5cf7cbf1 by Chris Manton · 3 years, 1 month ago
- 44e02af Add name component to GATT client API am: 20ecfc4d9e am: 43f111a869 am: 34802ce23b by Chris Manton · 3 years, 1 month ago
- fbafafa log: Polish security record logging structures am: ed9b10a6c3 am: 67687658ad am: d00b362393 by Chris Manton · 3 years, 1 month ago
- 34802ce Add name component to GATT client API am: 20ecfc4d9e am: 43f111a869 by Chris Manton · 3 years, 1 month ago
- d00b362 log: Polish security record logging structures am: ed9b10a6c3 am: 67687658ad by Chris Manton · 3 years, 1 month ago