1. bcc29eb Fix an integer underflow in build_read_multi_rsp by Hui Peng · 10 months ago odm/rc/qssi/12/fp4
  2. e6593ae Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 1 month ago
  3. 2adfc46 Fix UAF in gatt_cl.cc by Brian Delwiche · 12 months ago
  4. a0672b2 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 1 month ago
  5. 868e180 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 2 months ago
  6. 9757560 Revert "Revert "Fix wrong BR/EDR link key downgrades (P_256->P_192)"" by Brian Delwiche · 1 year, 2 months ago
  7. a8c91ff Revert^2 "Validate buffer length in sdpu_build_uuid_seq" by Brian Delwiche · 1 year, 2 months ago
  8. c249186 Fix OOB access in avdt_scb_hdl_pkt_no_frag by Hui Peng · 1 year, 6 months ago
  9. bef30a3 Merge "Fix an OOB write in SDP_AddAttribute" into sm7225_s_fp4_qssi_rc by Fairphone ODM · 1 year, 3 months ago
  10. c5caa17 Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into sm7225_s_fp4_qssi_rc by Fairphone ODM · 1 year, 3 months ago
  11. 5e767ff Fix an OOB write in SDP_AddAttribute by Hui Peng · 1 year, 5 months ago
  12. d7becfa Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 1 year, 5 months ago
  13. bbbdc72 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 1 year, 5 months ago
  14. fdcf87f Add bounds check in avdt_scb_act.cc by Brian Delwiche · 1 year, 8 months ago
  15. 24f3040 Fix integer overflow when parsing avrc response by Keith Mok · 1 year, 10 months ago
  16. ba3a28f Add length check when copy AVDT and AVCT packet by Keith Mok · 1 year, 10 months ago
  17. 9d90de6 Add missing increment in bnep_api.cc by Brian Delwiche · 1 year, 9 months ago
  18. 7c19171 Added max buffer length check by Brian Delwiche · 1 year, 9 months ago
  19. 7dcb418 Add length check when copy AVDTP packet by Ted Wang · 1 year, 10 months ago
  20. 2f478bf Add negative length check in process_service_search_rsp by Brian Delwiche · 1 year, 10 months ago
  21. 52fae08 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 2 months ago
  22. 2ff58a9 l2cap: Verify number of channels in the CoC request by Łukasz Rymanowski · 2 years ago
  23. e80f764 Check Avrcp packet vendor length before extracting length by William Escande · 2 years, 1 month ago
  24. 85c0d14 Fix out of bond write in gatt_db by William Escande · 2 years, 2 months ago
  25. e82cd6e GATT multi read: account for length for variable length read by Jakub Pawlowski · 2 years, 2 months ago
  26. 84ac221 Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RES by Chienyuan Huang · 2 years, 4 months ago
  27. 6a1bc49 Security fix OOB read due to invalid count in stack/avrc/avrc_pars_ct by Ted Wang · 2 years, 5 months ago
  28. 9b86a16 Security fix for potential OOB read in L2CAP by Chris Manton · 2 years, 4 months ago
  29. 292e758 Handle bogus multi value packet lengths by Chris Manton · 2 years, 6 months ago
  30. 30332f8 security: Use-After-Free in btm_sec_[dis]connected by Chris Manton · 2 years, 7 months ago
  31. 246b0d1 Merge s-mpr-2021-12-05 by Eric Arseneau · 2 years, 5 months ago
  32. 8b14d59 Merge mpr-2021-11-05 by Eric Arseneau · 2 years, 6 months ago
  33. b59afca Merge "Make SDP and inquiry request dequeue and execute more comprehensive and cancelDiscovery now removes all queued inquiry requests." into sc-qpr1-dev by TreeHugger Robot · 2 years, 8 months ago
  34. d241ce1 Make SDP and inquiry request dequeue and execute more comprehensive and by Rahul Sabnis · 2 years, 9 months ago
  35. 3ffe74d Ensure proper hci le meta event length size by Chris Manton · 2 years, 8 months ago
  36. d0743fb Security Fix: Crafted GATT request causes BT stack crash by Martin Brabham · 2 years, 9 months ago
  37. fa21bf4 Update AVRCP default version to 1.5 by Ted Wang · 2 years, 9 months ago
  38. 43cf5f2 Merge "GATT: Fix data length parameter" into sc-qpr1-dev by TreeHugger Robot · 2 years, 9 months ago
  39. f451ded GATT: Fix data length parameter by Hansong Zhang · 2 years, 9 months ago
  40. 1da56d1 Security Fix: Crafted GATT request causes BT stack crash by Martin Brabham · 2 years, 9 months ago
  41. d2dcfad Merge SP1A.210812.003 by Scott Lobdell · 2 years, 10 months ago
  42. 33797a6 Stop inquiry when inquiry cancelled by IHLHO KIM · 2 years, 10 months ago
  43. d559977 Stop inquiry when inquiry cancelled by IHLHO KIM · 2 years, 10 months ago
  44. 48d8595 Merge SP1A.210803.001 by Scott Lobdell · 2 years, 10 months ago
  45. ef54174 Merge "Merge SP1A.210723.002" into s-keystone-qcom-dev by Scott Lobdell · 2 years, 10 months ago
  46. a907659 A2dpSrc: Added support for 32/8KHz(1/2) by Satheesh Kumar Pallemoni · 2 years, 10 months ago
  47. cb7c6bb Also remove entry during delete in addition to clear by Martin Brabham · 2 years, 10 months ago
  48. abff1a3 L2CA_RegisterLECoc fix by Hansong Zhang · 2 years, 10 months ago
  49. 124f286 Merge "Fix L2cap LE COC security record leaks" into sc-dev by TreeHugger Robot · 2 years, 10 months ago
  50. f4a911c Fix L2cap LE COC security record leaks by Hansong Zhang · 2 years, 10 months ago
  51. 42df5a1 Merge SP1A.210723.002 by Scott Lobdell · 2 years, 10 months ago
  52. 5de15fd BTM_PM: Try other pending changes when current one failed by Hansong Zhang · 2 years, 10 months ago
  53. e2d1b78 Merge SP1A.210709.002 by Haamed Gheibi · 2 years, 11 months ago
  54. 709a7c1 Merge "A2dpSrc: Align legacy codec enumeration with AOSP(3/7)" into s-keystone-qcom-dev by Treehugger Robot · 2 years, 11 months ago
  55. 7d54fb0 eatt: Improve handling incoming EATT connection by Łukasz Rymanowski · 3 years ago
  56. 8eb2d36 eatt: Fix for the crash on incoming channel creation by Łukasz Rymanowski · 3 years ago
  57. 01915cf stack/gatt: Store GATT server supported features by Łukasz Rymanowski · 4 years, 1 month ago
  58. 3dc8ae9 eatt: Fix crash on double disconnect by Łukasz Rymanowski · 3 years ago
  59. b33ab19 eatt: Fix logging by Łukasz Rymanowski · 3 years ago
  60. f3db9f5 Queue discovery and device inquiry while bonding by Rahul Sabnis · 3 years ago
  61. 69dab96 Merge changes from topic "bluetooth_oob_api" into sc-dev by TreeHugger Robot · 3 years ago
  62. 01b1b58 OOB: Replace 'memcpy' with assignments by Martin Brabham · 3 years ago
  63. 83aa281 OOB: Start advertising when OOB data is generated. by Martin Brabham · 3 years ago
  64. 2260d86 OOB: Store keys and data generated for local OOB use. by Martin Brabham · 3 years ago
  65. d697931 OOB: Utilize SMP state machine to generate the OOB data. by Martin Brabham · 3 years ago
  66. b734572 OOB: Rework create bond out of band flow to not use btif_dm_cb_create_bond by Martin Brabham · 3 years, 1 month ago
  67. 0628a8e RESTRICT AUTOMERGE Security fix OOB read vuln stack/avrc/avrc_pars_tg by Chris Manton · 3 years, 2 months ago
  68. f9be837 Merge "SMP: Reject pairing if public_key.x match" into sc-dev by TreeHugger Robot · 3 years ago
  69. 1fd1f56 SMP: Reject pairing if public_key.x match by Hansong Zhang · 3 years ago
  70. 772c3d9 Remove UNUSED_ATTR from an used parameter by Cheney Ni · 3 years ago
  71. 0c7c119 Fix: add DelayReport feature when enable AV api by Zyan Wu · 3 years ago
  72. 6ef0832 Feature: send delay report once configed by Zyan Wu · 3 years, 1 month ago
  73. 8749fe2 Merge SP1A.210616.001 by Daniel Norman · 3 years ago
  74. f961265 IRK: Set IRK to resolving list by Martin Brabham · 3 years ago
  75. 67f83a0 Merge SP1A.210604.001 Change-Id: Ibc6255c773ea94aca76eafd8d9c93d21a30126a4 by Scott Lobdell · 3 years ago
  76. cd6246d Merge "A2DP: Restrict MTU while using SBC middle quality" into sc-dev by TreeHugger Robot · 3 years ago
  77. c324b54 Revert "Always unset def L2CAP_CBB_DEFAULT_DATA_RATE_BUFF_QUOTA" by Chris Manton · 3 years ago
  78. 5964f71 Merge "Ensure we do not send A2DP data to non-active stream devices" into sc-dev by TreeHugger Robot · 3 years ago
  79. 913ce2f Ensure we do not send A2DP data to non-active stream devices by Rahul Sabnis · 3 years ago
  80. 05ec436 A2DP: Restrict MTU while using SBC middle quality by Cheney Ni · 3 years ago
  81. fba2728 AOSP: Correct device type for dual mode peers by Animesh Fatehpuria · 3 years, 3 months ago
  82. 0440a21 Merge SP1A.210513.004 Change-Id: Idbc1822c79fefa03c56d89648df7fafd43282f7c by Chris Gross · 3 years ago
  83. ae08ee7 Fix out of bound read in read_reports_cb. by Richard Smith · 3 years, 3 months ago
  84. e714e4b gatt: Properly gatt register/deregister am: 7672851def am: 02848cc128 am: 81e9c91090 by Chris Manton · 3 years, 1 month ago
  85. 81e9c91 gatt: Properly gatt register/deregister am: 7672851def am: 02848cc128 by Chris Manton · 3 years, 1 month ago
  86. b4e6bab gatt: Properly init/free gatt layer am: 3d058ff5e3 am: d0c7dcfe76 am: 327f969fa6 by Chris Manton · 3 years, 1 month ago
  87. 327f969 gatt: Properly init/free gatt layer am: 3d058ff5e3 am: d0c7dcfe76 by Chris Manton · 3 years, 1 month ago
  88. 7672851 gatt: Properly gatt register/deregister by Chris Manton · 3 years, 1 month ago
  89. 3d058ff gatt: Properly init/free gatt layer by Chris Manton · 3 years, 1 month ago
  90. c409fee avdt_scb: fix dereferences of NULL by George Burgess IV · 3 years, 1 month ago
  91. 900467c Merge "CTKD: Fix role change bug on legacy BT stack" am: 672131f257 am: 85fc6e6012 am: dfb71cfc7e by Treehugger Robot · 3 years, 1 month ago
  92. dfb71cf Merge "CTKD: Fix role change bug on legacy BT stack" am: 672131f257 am: 85fc6e6012 by Treehugger Robot · 3 years, 1 month ago
  93. 672131f Merge "CTKD: Fix role change bug on legacy BT stack" by Treehugger Robot · 3 years, 1 month ago
  94. a4df700 CTKD: Fix role change bug on legacy BT stack by Animesh Fatehpuria · 3 years, 1 month ago
  95. 0c4bed1 Merge changes If5f6b231,I8c5eb4bb,I01aa1955 am: 8577c8e621 am: fe5cf7cbf1 am: 6ff137977a by Chris Manton · 3 years, 1 month ago
  96. 6ff1379 Merge changes If5f6b231,I8c5eb4bb,I01aa1955 am: 8577c8e621 am: fe5cf7cbf1 by Chris Manton · 3 years, 1 month ago
  97. 44e02af Add name component to GATT client API am: 20ecfc4d9e am: 43f111a869 am: 34802ce23b by Chris Manton · 3 years, 1 month ago
  98. fbafafa log: Polish security record logging structures am: ed9b10a6c3 am: 67687658ad am: d00b362393 by Chris Manton · 3 years, 1 month ago
  99. 34802ce Add name component to GATT client API am: 20ecfc4d9e am: 43f111a869 by Chris Manton · 3 years, 1 month ago
  100. d00b362 log: Polish security record logging structures am: ed9b10a6c3 am: 67687658ad by Chris Manton · 3 years, 1 month ago