1. 0e1b29e Merge "Fix a potential OOB read resulted from integer underflow" into tm-dev by Hui Peng · 2 years, 8 months ago
  2. 047a68b Fix an OOB bug in btm_read_rssi_complete by Hui Peng · 2 years, 9 months ago
  3. 976361c Merge "Add regression test for b/254774758" into tm-dev by Hui Peng · 2 years, 8 months ago
  4. be2a157 Add regression test for b/254774758 by Hui Peng · 2 years, 10 months ago
  5. a3141b5 Merge "Add mocking support for now function in AttributionProcessor" into tm-dev by Hui Peng · 2 years, 8 months ago
  6. e6d1eec Merge "Fix an OOB bug in btm_delete_stored_link_key_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  7. 56bb00a Merge "Fix an OOB bug in btm_ble_rand_enc_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  8. ba4fd4c Merge "Fix an OOB bug in btm_read_tx_power_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  9. 9056999 Merge "Fix an OOB bug in btu_ble_rc_param_req_evt" into tm-dev by Hui Peng · 2 years, 8 months ago
  10. 398f10c Merge "Fix an OOB bug in btm_ble_read_remote_features_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  11. 78e6c13 Merge "Fix an OOB bug in btu_ble_ll_conn_param_upd_evt" into tm-dev by Hui Peng · 2 years, 8 months ago
  12. 45027bb Merge "Fix an OOB write in BTA_GATTS_HandleValueIndication" into tm-dev by Hui Peng · 2 years, 8 months ago
  13. 0a90387 Merge "Fix an OOB bug in btm_create_conn_cancel_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  14. 96c1215 Merge "Fix an OOB bug in btm_ble_write_adv_enable_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  15. 993b073 Merge "Fix an OOB bug in btm_read_local_oob_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  16. bfdef9b Merge "Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket" into tm-dev by TreeHugger Robot · 2 years, 8 months ago
  17. 8855f6c Merge "Fix an OOB bug in btm_read_link_quality_complete" into tm-dev by Hui Peng · 2 years, 8 months ago
  18. 6494326 Merge "Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt" into tm-dev by Hui Peng · 2 years, 8 months ago
  19. d104769 Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket by Hui Peng · 2 years, 9 months ago
  20. f7679c1 Fix an OOB bug in on_iso_link_quality_read by Hui Peng · 2 years, 9 months ago
  21. 0ab9b92 Fix an OOB bug in btm_delete_stored_link_key_complete by Hui Peng · 2 years, 9 months ago
  22. 6aedab3 Fix an OOB bug in btm_ble_read_remote_features_complete by Hui Peng · 2 years, 9 months ago
  23. 14eaa92 Fix an OOB bug in btm_read_local_oob_complete by Hui Peng · 2 years, 9 months ago
  24. 606824a Fix an OOB bug in btm_read_tx_power_complete by Hui Peng · 2 years, 9 months ago
  25. 5bdefb7 Fix an OOB bug in btu_ble_rc_param_req_evt by Hui Peng · 2 years, 9 months ago
  26. a3c7e63 Fix an OOB write in BTA_GATTS_HandleValueIndication by Hui Peng · 2 years, 9 months ago
  27. 45e8d2d Merge "Fix an OOB write in SDP_AddAttribute" into tm-dev by Hui Peng · 2 years, 8 months ago
  28. e38dbb2 Fix an OOB bug in btm_ble_write_adv_enable_complete by Hui Peng · 2 years, 9 months ago
  29. b2c6806 Fix an OOB bug in btm_read_link_quality_complete by Hui Peng · 2 years, 9 months ago
  30. 0450562 Fix an OOB bug in btu_ble_ll_conn_param_upd_evt by Hui Peng · 2 years, 9 months ago
  31. adf06fb Fix an OOB bug in btm_create_conn_cancel_complete by Hui Peng · 2 years, 9 months ago
  32. 8d52336 Fix an OOB bug in btm_ble_rand_enc_complete by Hui Peng · 2 years, 9 months ago
  33. 362a914 Add regression test for b/255304475 by Hui Peng · 2 years, 9 months ago
  34. 1257628 Fix an OOB bug in btm_ble_clear_resolving_list_complete by Hui Peng · 2 years, 9 months ago
  35. 27200cf Add regression test for b/260078907 by Hui Peng · 2 years, 9 months ago
  36. 73827ac Fix an OOB bug in btm_ble_add_resolving_list_entry_complete by Hui Peng · 2 years, 9 months ago
  37. ecd5a3e Fix an OOB bug in BqrVseSubEvt::ParseBqrLinkQualityEvt by Hui Peng · 2 years, 9 months ago
  38. d2e67f5 Fix an OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 2 years, 9 months ago
  39. b6433f1 Fix a potential OOB read resulted from integer underflow by Hui Peng · 2 years, 9 months ago
  40. fb9a519 Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 10 months ago
  41. 15fbebc Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 10 months ago
  42. 0846b5b Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years, 9 months ago
  43. b0d7d4e Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 9 months ago
  44. 0494f1a Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into tm-dev by Hui Peng · 2 years, 8 months ago
  45. d4e34d8 Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 9 months ago
  46. 85188d0 Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt by Hui Peng · 2 years, 9 months ago
  47. 638e487 Revert "Drop connection when atttempting to disable encryption" by Ted Wang · 2 years, 9 months ago
  48. 5f8babc Add regression test for b/258057241 by Hui Peng · 2 years, 9 months ago
  49. 89255db Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 9 months ago
  50. eac401d Merge "Add bounds check in avdt_scb_act.cc" into tm-dev by Brian Delwiche · 2 years, 9 months ago
  51. 9e39995 Merge "Report failure when not able to connect to AVRCP" into tm-dev by Brian Delwiche · 2 years, 9 months ago
  52. e74ee03 Report failure when not able to connect to AVRCP by Robert Werthman · 3 years, 1 month ago
  53. d994865 Merge "Fix OPP comparison" into tm-dev by Brian Delwiche · 2 years, 10 months ago
  54. bbbbdb5 Fix OPP comparison by Brian Delwiche · 2 years, 10 months ago
  55. f8adec6 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 11 months ago
  56. 8c63c7c Drop connection when atttempting to disable encryption by Brian Delwiche · 2 years, 11 months ago
  57. 5ce5469 Merge "Pass IRK rotation flag into native" into tm-dev by Rahul Arya · 3 years ago
  58. f7443b7 Pass IRK rotation flag into native by Rahul Arya · 3 years ago
  59. 031dc50 Add flag to toggle IRK rotation by Rahul Arya · 3 years ago
  60. acffc03 Reschedule address rotation after connection to advertising set by Rahul Arya · 3 years ago
  61. 57d4dc3 Rotate advertising set addresses on IRK change by Rahul Arya · 3 years ago
  62. 32ad064 Merge "Fix URI check in BluetoothOppUtility.java" into tm-dev by Brian Delwiche · 3 years ago
  63. 65e154c Revert "Defer free in bta_hh_act.cc" by Chris Manton · 3 years ago
  64. 29a297b Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 3 years ago
  65. 789d4bc Add bounds check in avdt_scb_act.cc by Brian Delwiche · 3 years ago
  66. ccf0249 Merge "Fix interger overflow when parsing avrc response" into tm-dev by TreeHugger Robot · 3 years ago
  67. 573fb61 Merge "Defer free in bta_hh_act.cc" into tm-dev by Brian Delwiche · 3 years ago
  68. 18b1834 Merge "Add length check when copy AVDT and AVCT packet" into tm-dev by Keith Mok · 3 years ago
  69. 299f9e9 Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-dev by TreeHugger Robot · 3 years ago
  70. a6a1829 Merge "Add missing increment in bnep_api.cc" into tm-dev by Brian Delwiche · 3 years ago
  71. 7406459 Merge "Added max buffer length check" into tm-dev by Brian Delwiche · 3 years ago
  72. f497204 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years ago
  73. 20f2531 Merge "Add buffer in pin_reply in bluetooth.cc" into tm-dev by Brian Delwiche · 3 years ago
  74. 644f250 Add missing increment in bnep_api.cc by Brian Delwiche · 3 years, 1 month ago
  75. 6b4acc4 Added max buffer length check by Brian Delwiche · 3 years, 1 month ago
  76. cde75cf Defer free in bta_hh_act.cc by Brian Delwiche · 3 years, 1 month ago
  77. 96f108e Add negative length check in process_service_search_rsp by Brian Delwiche · 3 years, 1 month ago
  78. 6644c5c Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-dev by TreeHugger Robot · 3 years, 1 month ago
  79. b973ea8 Merge "Add local to pan_api.cc" into tm-dev by Brian Delwiche · 3 years, 1 month ago
  80. c99c43f Fix interger overflow when parsing avrc response by Keith Mok · 3 years, 1 month ago
  81. a60ebe2 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years, 1 month ago
  82. 2459b5e Add length check when copy AVDT and AVCT packet by Keith Mok · 3 years, 1 month ago
  83. 1ecc7c6 Save UUIDs using properties rather than the pairing_cb_t by Qasim Javed · 3 years, 1 month ago
  84. 90c4eb3 Merge "Check cached command for ack_pause" into tm-dev by Jack He · 3 years, 1 month ago
  85. ca6cac4 Add local to pan_api.cc by Brian Delwiche · 3 years, 1 month ago
  86. 2c09d20 Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 3 years, 1 month ago
  87. cf1f3c9 Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-dev by TreeHugger Robot · 3 years, 1 month ago
  88. dc17e83 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years, 1 month ago
  89. 3baf1d6 Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 3 years, 1 month ago
  90. f4aa35a Reconfigure Address policy on last bond removed by Rahul Sabnis · 3 years, 1 month ago
  91. 851a2d1 Merge "Add length check when copy AVDTP packet" into tm-dev by Ted Wang · 3 years, 1 month ago
  92. f9610d4 Merge "Fix method not enforcing correct permissions" into tm-dev by William Escande · 3 years, 1 month ago
  93. 4f88fd6 Merge "Fix potential interger overflow when parsing vendor response" into tm-dev by TreeHugger Robot · 3 years, 1 month ago
  94. 2ddaea4 Check cached command for ack_pause by Chienyuan · 3 years, 2 months ago
  95. 62c727d Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 3 years, 1 month ago
  96. cb95570 Merge "Revert "Add btm_cb.notify_when_complete_cb when inquiry is cancelled"" into tm-dev by Jack He · 3 years, 1 month ago
  97. 73e014e Merge "Use proper resolved address upon connection fail or timeout" into tm-dev by Jack He · 3 years, 1 month ago
  98. feaeffb AckPause when Create Connection Cancel fail by Chienyuan · 3 years, 1 month ago
  99. 62e29ee Fix potential interger overflow when parsing vendor response by Ted Wang · 3 years, 5 months ago
  100. ed9a843 Add length check when copy AVDTP packet by Ted Wang · 3 years, 1 month ago