1. 08be30c Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Prashantsinh Parmar · 10 months ago int/11/fp3 rel/11/fp3/8901.4.A.0025 rel/11/fp3/8901.4.A.0026 rel/11/fp3/8901.4.A.0027 rel/11/fp3/8901.4.A.0028 rel/11/fp3/8901.4.A.0025.0 rel/11/fp3/8901.4.A.0026.1 rel/11/fp3/8901.4.A.0027.1 rel/11/fp3/8901.4.A.0028.1
  2. ac1d120 OOBW in rw_i93_send_to_upper() by Alisher Alikhodjaev · 1 year, 1 month ago
  3. bc20e3e Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 1 year, 3 months ago rel/11/fp3/8901.4.A.0022 rel/11/fp3/8901.4.A.0023 rel/11/fp3/8901.4.A.0022.0 rel/11/fp3/8901.4.A.0023.0
  4. 2259cea OOBW in nci_snd_set_routing_cmd() by Alisher Alikhodjaev · 1 year, 4 months ago
  5. ef44384 Merge branch 'dev/11/fp3/security-aosp-rvc-release' into int/11/fp3 by Bharath · 1 year, 9 months ago rel/11/fp3/8901.4.A.0017 rel/11/fp3/8901.4.A.0019 rel/11/fp3/8901.4.A.0021 rel/11/fp3/8901.4.A.0017.3 rel/11/fp3/8901.4.A.0019.1 rel/11/fp3/8901.4.A.0019.2 rel/11/fp3/8901.4.A.0021.0
  6. 6db30b0 The length of a packet should be non-zero by Alisher Alikhodjaev · 1 year, 10 months ago
  7. b7110ad Merge branch 'security-aosp-rvc-release' into int/11/fp3 by Bharath · 2 years, 1 month ago rel/11/fp3/8901.4.A.0016 rel/11/fp3/8901.4.A.0016.6
  8. c3ea556 OOBR in nfc_ncif_proc_ee_discover_req() by Alisher Alikhodjaev · 2 years, 3 months ago
  9. 889cd41 Double Free in ce_t4t_data_cback by Alisher Alikhodjaev · 2 years, 3 months ago
  10. 6fbc75f Out of Bounds Read in nfa_dm_check_set_config by Alisher Alikhodjaev · 2 years, 3 months ago
  11. 9cbdc5c Merge tag 'android-security-11.0.0_r49' into int/11/fp3 by Karsten Tausche · 2 years, 6 months ago
  12. cd5b819 Type confusion due to race condition on tag type change by Alisher Alikhodjaev · 2 years, 11 months ago
  13. d7ea863 Merge "Potential OOB write in rw_i93_send_to_lower" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 2 months ago
  14. 92014d9 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag by Alisher Alikhodjaev · 3 years, 4 months ago
  15. e7d289b Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 am: fc78e602be am: e2ac5b5cb1 by Alisher Alikhodjaev · 3 years, 3 months ago
  16. e2ac5b5 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 am: fc78e602be by Alisher Alikhodjaev · 3 years, 3 months ago
  17. fc78e60 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 am: 65c9dae7e9 by Alisher Alikhodjaev · 3 years, 3 months ago
  18. 65c9dae Memory Disclosure, OOB Write, and Double Free in NFC T3T tag am: 16a3bb0b54 by Alisher Alikhodjaev · 3 years, 3 months ago
  19. 16a3bb0 Memory Disclosure, OOB Write, and Double Free in NFC T3T tag by Alisher Alikhodjaev · 3 years, 4 months ago
  20. a3ffc09 OOB Write in NFC stack when handling MIFARE Classic TLVs by Alisher Alikhodjaev · 3 years, 4 months ago
  21. ea37399 OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 am: 35e92101d8 am: 3bbd2da9ec by Alisher Alikhodjaev · 3 years, 4 months ago
  22. 3bbd2da OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 am: 35e92101d8 by Alisher Alikhodjaev · 3 years, 4 months ago
  23. 35e9210 OOB Write in NFC stack when handling MIFARE Classic TLVs am: 147b052f84 by Alisher Alikhodjaev · 3 years, 4 months ago
  24. 147b052 OOB Write in NFC stack when handling MIFARE Classic TLVs by Alisher Alikhodjaev · 3 years, 4 months ago
  25. f34b52d Unlink nfc hal death recipient when device shutdown by Jack Yu · 3 years, 6 months ago
  26. 14331cf Potential OOB write in rw_i93_send_to_lower by Alisher Alikhodjaev · 3 years, 5 months ago
  27. e1cd411 Prevent OOB read in nci_proc_rf_management_ntf by George Chang · 3 years, 6 months ago
  28. eade78a NFC - Memory disclosure in rw_i93_sm_format by Alisher Alikhodjaev · 3 years, 11 months ago
  29. 651aa05 NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 am: caca562ccb am: fb98bcb720 am: f43ed3f7b1 by Alisher Alikhodjaev · 3 years, 9 months ago
  30. fb98bcb NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 am: caca562ccb by Alisher Alikhodjaev · 3 years, 9 months ago
  31. caca562 NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad am: a06b54f3f9 by Alisher Alikhodjaev · 3 years, 9 months ago
  32. a06b54f NFC - Memory disclosure in rw_i93_sm_format am: 046b6676ad by Alisher Alikhodjaev · 3 years, 9 months ago
  33. 1051dee Merge "Potential OOB write in rw_t3t_send_raw_frame" into rvc-qpr-dev by TreeHugger Robot · 3 years, 10 months ago
  34. 26d62f0 Merge "Potential OOB read in ce_t4t_update_binary" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 10 months ago
  35. 2751c9f Merge "Prevent OOB in nfc_ncif_proc_get_routing" into rvc-qpr-dev by George Chang · 3 years, 10 months ago
  36. 046b667 NFC - Memory disclosure in rw_i93_sm_format by Alisher Alikhodjaev · 3 years, 11 months ago
  37. 7c5950e Merge "Tag-mismatch in nci_proc_ee_management_ntf" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 10 months ago
  38. 2db66c9 Tag-mismatch in nci_proc_ee_management_ntf by Alisher Alikhodjaev · 4 years ago
  39. e518ef4 Potential OOB write in rw_t3t_send_raw_frame by Alisher Alikhodjaev · 4 years ago
  40. 127e990 Merge "Heap-buffer-overflow in nfc_data_event" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  41. 970ed7b Merge "Potential OOB write in CE_SendRawFrame" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  42. dade700 Merge "Potential OOB read in nfc_ncif_proc_ee_action" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  43. fe53fef Prevent OOB in nfc_ncif_proc_get_routing by George Chang · 4 years ago
  44. 1ddf00d Merge "Tag-mismatch in nfc_enabled" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  45. c7240ed Merge "Potential OOB write in rw_i93_send_cmd_write_multi_blocks" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  46. ad210c7 Merge "Possible OOB write in NFA_RwI93WriteMultipleBlocks" into rvc-qpr-dev by Alisher Alikhodjaev · 3 years, 11 months ago
  47. 64ab5af Heap-buffer-overflow in nfc_data_event by Alisher Alikhodjaev · 4 years ago
  48. 4c47db6 Potential OOB read in ce_t4t_update_binary by Alisher Alikhodjaev · 4 years ago
  49. e287522 Potential OOB read in nfc_ncif_proc_ee_action by Alisher Alikhodjaev · 4 years ago
  50. 9f6dcf8 Potential OOB write in CE_SendRawFrame by Alisher Alikhodjaev · 4 years ago
  51. 24a570b Potential OOB write in rw_i93_send_cmd_write_multi_blocks by Alisher Alikhodjaev · 4 years ago
  52. 8d9317b Potential OOB write in RW_SendRawFrame by Alisher Alikhodjaev · 4 years ago
  53. b2d77c6 Tag-mismatch in nfc_enabled by Alisher Alikhodjaev · 4 years ago
  54. 01c1216 Possible OOB write in NFA_RwI93WriteMultipleBlocks by Alisher Alikhodjaev · 4 years ago
  55. 48c09a1 Add /system_ext/etc to config search path by Yo Chiang · 4 years ago
  56. 9b99553 Store crash NCI log before reporting error status by Jack Yu · 4 years, 1 month ago
  57. cebaf74 Store and dump the crash NCI log buffers by Jack Yu · 4 years, 1 month ago
  58. 3b26864 Merge "Prevent OOB write in nfc_set_conn_id" into rvc-dev by George Chang · 4 years, 1 month ago
  59. b96e00f Prevent OOB write in nfc_set_conn_id by George Chang · 4 years, 1 month ago
  60. a2fb14e Prevent potential OOB read in nci_proc_ee_management_ntf by George Chang · 4 years, 1 month ago
  61. 51d75bb Merge "Verify length of the HAL_NFC_POST_INIT_CPLT_EVT" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
  62. 4610e6f Merge "Use msg_len for boundary checks" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
  63. b498785 Merge "Possible OOB access in LLCP" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
  64. d9a560a Merge "Send error event if MAX_RETRY limit reached" into rvc-dev by Alisher Alikhodjaev · 4 years, 1 month ago
  65. f264359 Possible OOB access in LLCP by Alisher Alikhodjaev · 4 years, 2 months ago
  66. ae67dae Use msg_len for boundary checks by Alisher Alikhodjaev · 4 years, 2 months ago
  67. 45c45b8 Send error event if MAX_RETRY limit reached by Alisher Alikhodjaev · 4 years, 2 months ago
  68. 2241eb0 Verify length of the HAL_NFC_POST_INIT_CPLT_EVT by Alisher Alikhodjaev · 4 years, 2 months ago
  69. 2008712 Correct ONS IC_REF by George Chang · 4 years, 2 months ago
  70. 32892a8 Merge "Prevent OOB write in rw_t3t_send_to_lower" into rvc-dev by George Chang · 4 years, 2 months ago
  71. 5cf35a1 Merge "Prevent OOB read in rw_nfc_decodeTlv" into rvc-dev by George Chang · 4 years, 2 months ago
  72. 3c6b892 Merge "Prevent OOB read in nfc_ncif_proc_reset_rsp" into rvc-dev by George Chang · 4 years, 2 months ago
  73. c8df964 Prevent OOB read in nfc_ncif_proc_reset_rsp by George Chang · 4 years, 3 months ago
  74. 8bbe6a6 Prevent OOB write in rw_t3t_send_to_lower by George Chang · 4 years, 3 months ago
  75. e0ab761 Prevent OOB read in rw_nfc_decodeTlv by George Chang · 4 years, 3 months ago
  76. aa42cce Prevent OOB in nfc_ncif_decode_rf_params by Jack Yu · 4 years, 2 months ago
  77. 595fbc4 Merge "Prevent OOB access in Ndef read" into qt-qpr1-dev am: ed74530afa by TreeHugger Robot · 4 years, 2 months ago
  78. d2b887b Merge "Prevent OOB read in i93 tag detection" into qt-qpr1-dev am: 1fabf83308 by TreeHugger Robot · 4 years, 2 months ago
  79. ed74530 Merge "Prevent OOB access in Ndef read" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  80. 1fabf83 Merge "Prevent OOB read in i93 tag detection" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  81. f1d3bc3 Merge "Prevent OOB read in rw_i93_sm_format" into qt-qpr1-dev am: 630da80b15 by TreeHugger Robot · 4 years, 2 months ago
  82. 97b819f Merge "Prevent OOB read in nfa_dm_handle_message" into qt-qpr1-dev am: 87add19258 by TreeHugger Robot · 4 years, 2 months ago
  83. 630da80 Merge "Prevent OOB read in rw_i93_sm_format" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  84. 87add19 Merge "Prevent OOB read in nfa_dm_handle_message" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  85. 4d48fdd Merge "Prevent stack buffer overflow in rw_t3t_message_set_block_list" into qt-qpr1-dev am: 6a1db04d86 by TreeHugger Robot · 4 years, 2 months ago
  86. 6a1db04 Merge "Prevent stack buffer overflow in rw_t3t_message_set_block_list" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  87. 7fb4b29 Merge "Adding NCI packet length check" into qt-qpr1-dev by George Chang · 4 years, 2 months ago
  88. c353b52 Merge "Prevent OOBR in nfa_hci_conn_cback" into qt-qpr1-dev am: f8cdb35119 by TreeHugger Robot · 4 years, 2 months ago
  89. c19769e Merge "Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf" into qt-qpr1-dev am: fd8f35d970 by TreeHugger Robot · 4 years, 2 months ago
  90. 71dd1a5 Prevent OOB read in rw_mfc_writeBlock am: bdb74421e9 by Jack Yu · 4 years, 2 months ago
  91. f8cdb35 Merge "Prevent OOBR in nfa_hci_conn_cback" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  92. fd8f35d Merge "Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf" into qt-qpr1-dev by TreeHugger Robot · 4 years, 2 months ago
  93. ca2f591 Prevent OOB access in Ndef read by Jack Yu · 4 years, 3 months ago
  94. 97d2416 Prevent OOB read in nfa_dm_handle_message by Jack Yu · 4 years, 3 months ago
  95. df6cbcd Prevent stack buffer overflow in rw_t3t_message_set_block_list by Jack Yu · 4 years, 3 months ago
  96. 2e503c4 Kill NfcService if NFC HAL service dies by Anil Hiranniah · 4 years, 4 months ago
  97. c3a2dab Prevent OOBR in nfa_hci_conn_cback by Jack Yu · 4 years, 3 months ago
  98. 7cd831f Prevent OOB read in rw_i93_sm_format by Jack Yu · 4 years, 3 months ago
  99. afd41fb Prevent OOB read in i93 tag detection by Jack Yu · 4 years, 3 months ago
  100. 0e108e6 Prevent OOB read in nfc_ncif_proc_t3t_polling_ntf by Jack Yu · 4 years, 3 months ago