aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2019-05-02Merge cherrypicks of [7293853, 7292376, 7293922] into oc-m8-releaseandroid-8.1.0_r67android-8.1.0_r65oreo-m8-releaseandroid-build-team Robot
2019-05-02Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)"Myles Watson
2019-04-16Merge cherrypicks of [7077328, 7074021, 7074022, 7077576, 7077577, 7077578, 7...android-build-team Robot
2019-04-16DO NOT MERGE Don't persist bonds using sample LTKJakub Pawlowski
2019-04-16DO NOT MERGE Drop Bluetooth connection with weak encryption keyJakub Pawlowski
2019-02-19Merge cherrypicks of [6452478, 6451642, 6451643, 6453811, 6451644, 6451645, 6...android-8.1.0_r64android-8.1.0_r63android-build-team Robot
2019-02-19btm_proc_smp_cback: Don't access p_dev_rec if freedHansong Zhang
2019-02-19DO NOT MERGE Separate SDP procedure from bonding state (1/2)Ugo Yu
2019-02-19process_l2cap_cmd: Fix OOBHansong Zhang
2019-02-19btm_ble_multi_adv: Check data length in HCI interfaceHansong Zhang
2019-01-16Merge cherrypicks of [6072696, 6072074, 6072757, 6072120, 6072121, 6072122, 6...android-8.1.0_r62android-build-team Robot
2019-01-16DO NOT MERGE A security fix to check buffer length in l2c_lcc_proc_pduStanley Tng
2018-12-07Merge cherrypicks of [5745882, 5746123, 5746124, 5746125, 5745544, 5745819, 5...android-8.1.0_r61android-build-team Robot
2018-12-07Add OOB check in avrc_pars_browse_rspUgo Yu
2018-12-07Fix buffer overflow in btif_dm_data_copyJakub Pawlowski
2018-12-07Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfmJakub Pawlowski
2018-11-26Merge cherrypicks of [5610460, 5610582, 5610249, 5610250, 5610113, 5610163, 5...android-8.1.0_r60android-build-team Robot
2018-11-26DO NOT MERGE HFP: Check AT command buffer boundary during parsingChienyuan
2018-11-26DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_actMyles Watson
2018-11-26DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attrMyles Watson
2018-11-26DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rspMyles Watson
2018-11-26DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL dataUgo Yu
2018-10-19Merge cherrypicks of [5313290, 5313323, 5313343, 5313415, 5313291, 5313441, 5...android-8.1.0_r53android-build-team Robot
2018-10-19Fix possible OOB readJakub Pawlowski
2018-10-19DO NOT MERGE - Check SDU lower bound before allocate p_dataUgo Yu
2018-09-11Merge cherrypicks of [4995494, 4995495, 4995496, 4995497, 4997652, 4997881, 4...android-8.1.0_r51android-build-team Robot
2018-09-11Check data length when parsing AVRCP vendor specific command responsesPavlin Radoslavov
2018-09-11DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_ven...Pavlin Radoslavov
2018-08-30Merge cherrypicks of [4897833, 4897834, 4897835] into oc-m8-releaseandroid-8.1.0_r48android-build-team Robot
2018-08-30Fix a wrong check in rfc_parse_dataHansong Zhang
2018-08-30Add bound check for rfc_parse_dataHansong Zhang
2018-08-16Merge cherrypicks of [4793902] into oc-m8-releaseandroid-build-team Robot
2018-08-16Fix build failure in stack/rfcomm/rfc_ts_frames.cHansong Zhang
2018-08-16Merge cherrypicks of [4787660, 4787680, 4787071, 4787700, 4787592, 4787701, 4...android-build-team Robot
2018-08-16Add packet length checks in mca_ccb_hdl_reqCheney Ni
2018-08-16Checks the SMP length to fix OOB readCheney Ni
2018-08-16Add packet length check in smp_proc_master_idUgo Yu
2018-08-16Add missing AVRCP message length checks inside avrc_msg_cbackPavlin Radoslavov
2018-08-16DO NOT MERGE Fix OOB read before buffer length checkUgo Yu
2018-08-16Check packet length in bta_av_proc_meta_cmdChienyuan
2018-08-16Fix OOB read in avrc_ctrl_pars_vendor_rspHansong Zhang
2018-08-16Check remaining frame length in rfc_process_mx_messageHansong Zhang
2018-08-16Fix copy length calculation in sdp_copy_raw_dataJakub Pawlowski
2018-08-16DO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copyHansong Zhang
2018-08-03Merge cherrypicks of [4691111, 4689862, 4690575, 4690576, 4690577, 4690578, 4...android-8.1.0_r45oreo-m4-s12-releaseandroid-build-team Robot
2018-08-03HID Host: Check L2CAP packet data lengthHansong Zhang
2018-08-03DO NOT MERGE Fix OOB read in process_l2cap_cmdHansong Zhang
2018-08-03Add packet length checks in l2cble_process_sig_cmdJakub Pawlowski
2018-08-03Don't use Address after it was deletedJakub Pawlowski
2018-08-03HFP: Fix out of bound access in phone number processingHansong Zhang