1. 08fca7e DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 6 years ago
  2. 3341684 Merge "Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)"" into nyc-dev by TreeHugger Robot · 6 years ago
  3. abd0cc4 DO NOT MERGE Fix potential OOB read in sdpu_get_len_from_type by Ted Wang · 6 years ago
  4. f4ba1c4 Revert "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" by Myles Watson · 6 years ago
  5. 342e553 DO NOT MERGE Don't persist bonds using sample LTK by Jakub Pawlowski · 6 years ago
  6. 2711c1a DO NOT MERGE Drop Bluetooth connection with weak encryption key by Jakub Pawlowski · 6 years ago
  7. e969730 Merge "DO NOT MERGE Fix length for L2CAP config type EXT FLOW" into nyc-dev by TreeHugger Robot · 6 years ago
  8. d7f2b95 DO NOT MERGE Fix length for L2CAP config type EXT FLOW by Hansong Zhang · 6 years ago
  9. e9600fc Merge "DO NOT MERGE Separate SDP procedure from bonding state (1/2)" into nyc-dev by TreeHugger Robot · 6 years ago
  10. 6bfca9c Merge "DO NOT MERGE btm_proc_smp_cback: Don't access p_dev_rec if freed" into nyc-dev by TreeHugger Robot · 6 years ago
  11. 32208fd Merge "DO NOT MERGE process_l2cap_cmd: Fix OOB" into nyc-dev by TreeHugger Robot · 7 years ago
  12. aa78c8b DO NOT MERGE btm_proc_smp_cback: Don't access p_dev_rec if freed by Hansong Zhang · 7 years ago
  13. 896111a DO NOT MERGE process_l2cap_cmd: Fix OOB by Hansong Zhang · 7 years ago
  14. d99de9d DO NOT MERGE A security fix to check buffer length in l2c_lcc_proc_pdu by Stanley Tng · 7 years ago
  15. 2b257de Fix buffer overflow in btif_dm_data_copy by Jakub Pawlowski · 7 years ago
  16. 256fcac Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm by Jakub Pawlowski · 7 years ago
  17. 6958313 DO NOT MERGE Separate SDP procedure from bonding state (1/2) by Ugo Yu · 7 years ago
  18. b20583b Merge "DO NOT MERGE HFP: Check AT command buffer boundary during parsing" into nyc-dev by Hansong Zhang · 7 years ago
  19. 65a8078 Merge "DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act" into nyc-dev by TreeHugger Robot · 7 years ago
  20. 5963b34 Merge "DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr" into nyc-dev by TreeHugger Robot · 7 years ago
  21. 646d32c Merge "DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp" into nyc-dev by TreeHugger Robot · 7 years ago
  22. 435deba DO NOT MERGE HFP: Check AT command buffer boundary during parsing by Chienyuan · 7 years ago
  23. f078f78 DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr by Myles Watson · 7 years ago
  24. b180105 DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp by Myles Watson · 7 years ago
  25. bb8ae44 DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act by Myles Watson · 7 years ago
  26. 10e0027 DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data by Ugo Yu · 7 years ago
  27. d5228d7 Fix possible OOB read in process_service_search_rsp by Jakub Pawlowski · 7 years ago
  28. 35f419c DO NOT MERGE - Check SDU lower bound before allocate p_data by Ugo Yu · 7 years ago
  29. 3dd70a7 Merge "DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses" into nyc-dev by TreeHugger Robot · 7 years ago
  30. 3157201 DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() by Pavlin Radoslavov · 7 years ago
  31. ffc0d8f DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses by Pavlin Radoslavov · 7 years ago
  32. daf5354 Merge "Checks the SMP length to fix OOB read" into nyc-dev by TreeHugger Robot · 7 years ago
  33. 3ee9ccd Merge "DO NOT MERGE Add packet length check in smp_proc_master_id" into nyc-dev by TreeHugger Robot · 7 years ago
  34. d21277c Merge "DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback" into nyc-dev by TreeHugger Robot · 7 years ago
  35. 3272013 Merge "DO NOT MERGE Check packet length in bta_av_proc_meta_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  36. 1c86106 Merge "DO NOT MERGE Fix OOB read before buffer length check" into nyc-dev by TreeHugger Robot · 7 years ago
  37. 9265f65 DO NOT MERGE Add packet length check in smp_proc_master_id by Ugo Yu · 7 years ago
  38. 9a1046a Checks the SMP length to fix OOB read by Cheney Ni · 7 years ago
  39. c4cfe6c Fix copy length calculation in sdp_copy_raw_data by Jakub Pawlowski · 7 years ago
  40. 24dc32e Merge "DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp" into nyc-dev by TreeHugger Robot · 7 years ago
  41. cd5d134 Merge "DO NOT MERGE Check remaining frame length in rfc_process_mx_message" into nyc-dev by Hansong Zhang · 7 years ago
  42. 3192d75 DO NOT MERGE Check remaining frame length in rfc_process_mx_message by Hansong Zhang · 7 years ago
  43. b2a66cf DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback by Pavlin Radoslavov · 7 years ago
  44. 9fccd69 DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req by Cheney Ni · 7 years ago
  45. 50b85db DO NOT MERGE Check packet length in bta_av_proc_meta_cmd by Chienyuan · 7 years ago
  46. 6fe963e DO NOT MERGE Fix OOB read before buffer length check by Ugo Yu · 7 years ago
  47. e8f2311 DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp by Hansong Zhang · 7 years ago
  48. 8888305 Merge "DO NOT MERGE SDP: Fix the param_len recalculation" into nyc-dev by TreeHugger Robot · 7 years ago
  49. fa2d999 DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  50. 61a380b [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 am: 0fa926c060 skipped: 256c8f875f by Android Build Merger (Role) · 7 years ago
  51. 256c8f8 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 am: 0fa926c060 by Android Build Merger (Role) · 7 years ago
  52. 0fa926c [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 by Android Build Merger (Role) · 7 years ago
  53. 3eb8f15 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 by Android Build Merger (Role) · 7 years ago
  54. 1bd445f DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  55. 29a622a DO NOT MERGE Fix a wrong check in rfc_parse_data by Hansong Zhang · 7 years ago
  56. 20a4f37 DO NOT MERGE Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  57. 444c782 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 skipped: f8a2d13651 skipped: 1eaf9dff0a by Android Build Merger (Role) · 7 years ago
  58. 1eaf9df [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 skipped: f8a2d13651 by Android Build Merger (Role) · 7 years ago
  59. f8a2d13 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 by Android Build Merger (Role) · 7 years ago
  60. c91a3c7 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f by Android Build Merger (Role) · 7 years ago
  61. d3c8e6b Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  62. 4d19d91 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 am: 3d132a364b skipped: 50bda6b91e by Android Build Merger (Role) · 7 years ago
  63. 50bda6b [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 am: 3d132a364b by Android Build Merger (Role) · 7 years ago
  64. 3d132a3 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 by Android Build Merger (Role) · 7 years ago
  65. e1061d4 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e by Android Build Merger (Role) · 7 years ago
  66. 720d83a Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  67. f39033c Merge "Fix out of bounds read in l2c_rcv_acl_data" into nyc-dev by Jakub Pawlowski · 7 years ago
  68. 0b104d1 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 am: 8477459858 am: caeb84cdef by Android Build Merger (Role) · 7 years ago
  69. caeb84c [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 am: 8477459858 by Android Build Merger (Role) · 7 years ago
  70. 8477459 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 by Android Build Merger (Role) · 7 years ago
  71. 21eb7b1 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 by Android Build Merger (Role) · 7 years ago
  72. 53a89d9 BLE: Don't access freed buffer in log message by Nitin Shivpure · 7 years ago
  73. 22651ae Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  74. a4c8494 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 am: 7e71b81d46 skipped: 3c3d27d0a4 by Android Build Merger (Role) · 7 years ago
  75. 3c3d27d [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 am: 7e71b81d46 by Android Build Merger (Role) · 7 years ago
  76. 7e71b81 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 by Android Build Merger (Role) · 7 years ago
  77. 48833b2 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d by Android Build Merger (Role) · 7 years ago
  78. fb614b9 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  79. 95b999f Don't use Address after it was deleted by Jakub Pawlowski · 7 years ago
  80. d89048b Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  81. 375c0c2 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into nyc-dev by TreeHugger Robot · 7 years ago
  82. 5261fc6 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr1.5-dev by TreeHugger Robot · 7 years ago
  83. 78db2b8 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into cw-e-dev by TreeHugger Robot · 7 years ago
  84. e6b755d Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  85. 6c619e9 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into mnc-dev by TreeHugger Robot · 7 years ago
  86. b82d540 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dev by TreeHugger Robot · 7 years ago
  87. 06bf297 Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  88. 379c3ad DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  89. 1141925 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 am: 350d2091a7 am: 35e2713004 by Android Build Merger (Role) · 7 years ago
  90. 35e2713 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 am: 350d2091a7 by Android Build Merger (Role) · 7 years ago
  91. 350d209 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 by Android Build Merger (Role) · 7 years ago
  92. 6ca0047 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 by Android Build Merger (Role) · 7 years ago
  93. 0de61ca SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 7 years ago
  94. 5d718c2 Merge "DO NOT MERGE HFP: Fix out of bound access in phone number processing" into nyc-dev by TreeHugger Robot · 7 years ago
  95. a080096 DO NOT MERGE HFP: Fix out of bound access in phone number processing by Jack He · 7 years ago
  96. 32df36d DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  97. e50ff88 [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 am: 952125739d skipped: 9e1283f639 by Android Build Merger (Role) · 7 years ago
  98. 9e1283f [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 am: 952125739d by Android Build Merger (Role) · 7 years ago
  99. 9521257 [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 by Android Build Merger (Role) · 7 years ago
  100. 4db238e [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d by Android Build Merger (Role) · 7 years ago