- 08be30c Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Prashantsinh Parmar · 10 months ago int/11/fp3 rel/11/fp3/8901.4.A.0025 rel/11/fp3/8901.4.A.0026 rel/11/fp3/8901.4.A.0027 rel/11/fp3/8901.4.A.0028 rel/11/fp3/8901.4.A.0025.0 rel/11/fp3/8901.4.A.0026.1 rel/11/fp3/8901.4.A.0027.1 rel/11/fp3/8901.4.A.0028.1
- ac1d120 OOBW in rw_i93_send_to_upper() by Alisher Alikhodjaev · 1 year, 1 month ago
- bc20e3e Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 1 year, 3 months ago rel/11/fp3/8901.4.A.0022 rel/11/fp3/8901.4.A.0023 rel/11/fp3/8901.4.A.0022.0 rel/11/fp3/8901.4.A.0023.0
- 2259cea OOBW in nci_snd_set_routing_cmd() by Alisher Alikhodjaev · 1 year, 4 months ago
- ef44384 Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 1 year, 9 months ago rel/11/fp3/8901.4.A.0017 rel/11/fp3/8901.4.A.0019 rel/11/fp3/8901.4.A.0021 rel/11/fp3/8901.4.A.0017.3 rel/11/fp3/8901.4.A.0019.1 rel/11/fp3/8901.4.A.0019.2 rel/11/fp3/8901.4.A.0021.0
- 6db30b0 The length of a packet should be non-zero by Alisher Alikhodjaev · 1 year, 10 months ago
- b7110ad Merge branch 'security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years, 1 month ago rel/11/fp3/8901.4.A.0016 rel/11/fp3/8901.4.A.0016.6
- c3ea556 OOBR in nfc_ncif_proc_ee_discover_req() by Alisher Alikhodjaev · 2 years, 3 months ago
- 889cd41 Double Free in ce_t4t_data_cback by Alisher Alikhodjaev · 2 years, 3 months ago
- 6fbc75f Out of Bounds Read in nfa_dm_check_set_config by Alisher Alikhodjaev · 2 years, 3 months ago
- 9cbdc5c Merge tag 'android-security-11.0.0_r49' into int/11/fp3 by Karsten Tausche · 2 years, 6 months ago
- cd5b819 Type confusion due to race condition on tag type change by Alisher Alikhodjaev · 2 years, 11 months ago
- d7ea863 Merge "Potential OOB write in rw_i93_send_to_lower" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 2 months ago
- 92014d9 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag by Alisher Alikhodjaev · 3 years, 4 months ago
- e7d289b Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 am: fc78e602be am: e2ac5b5cb1 by Alisher Alikhodjaev · 3 years, 3 months ago
- e2ac5b5 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 am: fc78e602be by Alisher Alikhodjaev · 3 years, 3 months ago
- fc78e60 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 by Alisher Alikhodjaev · 3 years, 3 months ago
- 65c9dae Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 by Alisher Alikhodjaev · 3 years, 3 months ago
- 16a3bb0 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag by Alisher Alikhodjaev · 3 years, 4 months ago
- a3ffc09 OOB Write in NFC stack when handling MIFARE Classic TLVs by Alisher Alikhodjaev · 3 years, 4 months ago
- ea37399 OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 am: 35e92101d8 am: 3bbd2da9ec by Alisher Alikhodjaev · 3 years, 4 months ago
- 3bbd2da OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 am: 35e92101d8 by Alisher Alikhodjaev · 3 years, 4 months ago
- 35e9210 OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 by Alisher Alikhodjaev · 3 years, 4 months ago
- 147b052 OOB Write in NFC stack when handling MIFARE Classic TLVs by Alisher Alikhodjaev · 3 years, 4 months ago
- f34b52d Unlink nfc hal death recipient when device shutdown by Jack Yu · 3 years, 6 months ago
- 14331cf Potential OOB write in rw_i93_send_to_lower by Alisher Alikhodjaev · 3 years, 5 months ago
- e1cd411 Prevent OOB read in nci_proc_rf_management_ntf by George Chang · 3 years, 6 months ago
- eade78a NFC - Memory disclosure in rw_i93_sm_format by Alisher Alikhodjaev · 3 years, 11 months ago
- 651aa05 NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 am: caca562ccb am: fb98bcb720 am: f43ed3f7b1 by Alisher Alikhodjaev · 3 years, 9 months ago
- fb98bcb NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 am: caca562ccb by Alisher Alikhodjaev · 3 years, 9 months ago
- caca562 NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 by Alisher Alikhodjaev · 3 years, 9 months ago
- a06b54f NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad by Alisher Alikhodjaev · 3 years, 9 months ago
- 1051dee Merge "Potential OOB write in rw_t3t_send_raw_frame" into rvc-qpr-dev by TreeHugger Robot · 3 years, 10 months ago
- 26d62f0 Merge "Potential OOB read in ce_t4t_update_binary" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 10 months ago
- 2751c9f Merge "Prevent OOB in nfc_ncif_proc_get_routing" into rvc-qpr-dev by George Chang · 3 years, 10 months ago
- 046b667 NFC - Memory disclosure in rw_i93_sm_format by Alisher Alikhodjaev · 3 years, 11 months ago
- 7c5950e Merge "Tag-mismatch in nci_proc_ee_management_ntf" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 10 months ago
- 2db66c9 Tag-mismatch in nci_proc_ee_management_ntf by Alisher Alikhodjaev · 4 years ago
- e518ef4 Potential OOB write in rw_t3t_send_raw_frame by Alisher Alikhodjaev · 4 years ago
- 127e990 Merge "Heap-buffer-overflow in nfc_data_event" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- 970ed7b Merge "Potential OOB write in CE_SendRawFrame" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- dade700 Merge "Potential OOB read in nfc_ncif_proc_ee_action" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- fe53fef Prevent OOB in nfc_ncif_proc_get_routing by George Chang · 4 years ago
- 1ddf00d Merge "Tag-mismatch in nfc_enabled" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- c7240ed Merge "Potential OOB write in rw_i93_send_cmd_write_multi_blocks" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- ad210c7 Merge "Possible OOB write in NFA_RwI93WriteMultipleBlocks" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
- 64ab5af Heap-buffer-overflow in nfc_data_event by Alisher Alikhodjaev · 4 years ago
- 4c47db6 Potential OOB read in ce_t4t_update_binary by Alisher Alikhodjaev · 4 years ago
- e287522 Potential OOB read in nfc_ncif_proc_ee_action by Alisher Alikhodjaev · 4 years ago
- 9f6dcf8 Potential OOB write in CE_SendRawFrame by Alisher Alikhodjaev · 4 years ago
- 24a570b Potential OOB write in rw_i93_send_cmd_write_multi_blocks by Alisher Alikhodjaev · 4 years ago
- 8d9317b Potential OOB write in RW_SendRawFrame by Alisher Alikhodjaev · 4 years ago
- b2d77c6 Tag-mismatch in nfc_enabled by Alisher Alikhodjaev · 4 years ago
- 01c1216 Possible OOB write in NFA_RwI93WriteMultipleBlocks by Alisher Alikhodjaev · 4 years ago
- 48c09a1 Add /system_ext/etc to config search path by Yo Chiang · 4 years ago
- 9b99553 Store crash NCI log before reporting error status by Jack Yu · 4 years, 1 month ago
- cebaf74 Store and dump the crash NCI log buffers by Jack Yu · 4 years, 1 month ago
- 3b26864 Merge "Prevent OOB write in nfc_set_conn_id" into rvc-dev by George Chang · 4 years, 1 month ago
- b96e00f Prevent OOB write in nfc_set_conn_id by George Chang · 4 years, 1 month ago
- a2fb14e Prevent potential OOB read in nci_proc_ee_management_ntf by George Chang · 4 years, 1 month ago
- 51d75bb Merge "Verify length of the HAL_NFC_POST_INIT_CPLT_EVT" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
- 4610e6f Merge "Use msg_len for boundary checks" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
- b498785 Merge "Possible OOB access in LLCP" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
- d9a560a Merge "Send error event if MAX_RETRY limit reached" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
- f264359 Possible OOB access in LLCP by Alisher Alikhodjaev · 4 years, 2 months ago
- ae67dae Use msg_len for boundary checks by Alisher Alikhodjaev · 4 years, 2 months ago
- 45c45b8 Send error event if MAX_RETRY limit reached by Alisher Alikhodjaev · 4 years, 2 months ago
- 2241eb0 Verify length of the HAL_NFC_POST_INIT_CPLT_EVT by Alisher Alikhodjaev · 4 years, 2 months ago
- 2008712 Correct ONS IC_REF by George Chang · 4 years, 2 months ago
- 32892a8 Merge "Prevent OOB write in rw_t3t_send_to_lower" into rvc-dev by George Chang · 4 years, 2 months ago
- 5cf35a1 Merge "Prevent OOB read in rw_nfc_decodeTlv" into rvc-dev by George Chang · 4 years, 2 months ago
- 3c6b892 Merge "Prevent OOB read in nfc_ncif_proc_reset_rsp" into rvc-dev by George Chang · 4 years, 2 months ago
- c8df964 Prevent OOB read in nfc_ncif_proc_reset_rsp by George Chang · 4 years, 3 months ago
- 8bbe6a6 Prevent OOB write in rw_t3t_send_to_lower by George Chang · 4 years, 3 months ago
- e0ab761 Prevent OOB read in rw_nfc_decodeTlv by George Chang · 4 years, 3 months ago
- aa42cce Prevent OOB in nfc_ncif_decode_rf_params by Jack Yu · 4 years, 2 months ago
- 595fbc4 Merge "Prevent OOB access in Ndef read" into qt-qpr1-dev am: ed74530afa by TreeHugger Robot · 4 years, 2 months ago
- d2b887b Merge "Prevent OOB read in i93 tag detection" into qt-qpr1-dev am: 1fabf83308 by TreeHugger Robot · 4 years, 2 months ago
- ed74530 Merge "Prevent OOB access in Ndef read" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- 1fabf83 Merge "Prevent OOB read in i93 tag detection" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- f1d3bc3 Merge "Prevent OOB read in rw_i93_sm_format" into qt-qpr1-dev am: 630da80b15 by TreeHugger Robot · 4 years, 2 months ago
- 97b819f Merge "Prevent OOB read in nfa_dm_handle_message" into qt-qpr1-dev am: 87add19258 by TreeHugger Robot · 4 years, 2 months ago
- 630da80 Merge "Prevent OOB read in rw_i93_sm_format" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- 87add19 Merge "Prevent OOB read in nfa_dm_handle_message" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- 4d48fdd Merge "Prevent stack buffer overflow in rw_t3t_message_set_block_list" into qt-qpr1-dev am: 6a1db04d86 by TreeHugger Robot · 4 years, 2 months ago
- 6a1db04 Merge "Prevent stack buffer overflow in rw_t3t_message_set_block_list" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- 7fb4b29 Merge "Adding NCI packet length check" into qt-qpr1-dev by George Chang · 4 years, 2 months ago
- c353b52 Merge "Prevent OOBR in nfa_hci_conn_cback" into qt-qpr1-dev am: f8cdb35119 by TreeHugger Robot · 4 years, 2 months ago
- c19769e Merge "Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf" into qt-qpr1-dev am: fd8f35d970 by TreeHugger Robot · 4 years, 2 months ago
- 71dd1a5 Prevent OOB read in rw_mfc_writeBlock am: bdb74421e9 by Jack Yu · 4 years, 2 months ago
- f8cdb35 Merge "Prevent OOBR in nfa_hci_conn_cback" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- fd8f35d Merge "Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
- ca2f591 Prevent OOB access in Ndef read by Jack Yu · 4 years, 3 months ago
- 97d2416 Prevent OOB read in nfa_dm_handle_message by Jack Yu · 4 years, 3 months ago
- df6cbcd Prevent stack buffer overflow in rw_t3t_message_set_block_list by Jack Yu · 4 years, 3 months ago
- 2e503c4 Kill NfcService if NFC HAL service dies by Anil Hiranniah · 4 years, 4 months ago
- c3a2dab Prevent OOBR in nfa_hci_conn_cback by Jack Yu · 4 years, 3 months ago
- 7cd831f Prevent OOB read in rw_i93_sm_format by Jack Yu · 4 years, 3 months ago
- afd41fb Prevent OOB read in i93 tag detection by Jack Yu · 4 years, 3 months ago
- 0e108e6 Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf by Jack Yu · 4 years, 3 months ago