1. 7333659 DO NOT MERGE Prevent stack overflow in btif_storage by Hansong Zhang · 7 years ago
  2. eb31324 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 7 years ago
  3. 09ec968 Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into mnc-dev by TreeHugger Robot · 7 years ago
  4. 5934e70 DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  5. b7ffb21 DO NOT MERGE Add bounds check for BNEP_Write by Hansong Zhang · 7 years ago
  6. 254939b Merge "DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 7 years ago
  7. 41cb06f Merge "DO NOT MERGE Handle bad packet length in gatts_process_read_req" into mnc-dev by TreeHugger Robot · 7 years ago
  8. 93ed762 Merge "DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result" into mnc-dev by TreeHugger Robot · 7 years ago
  9. e7cdfed DO NOT MERGE Handle bad packet length in gatts_process_read_req by Stanley Tng · 7 years ago
  10. aa349da DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback by Myles Watson · 7 years ago
  11. c361d98 DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result by Hansong Zhang · 7 years ago
  12. 42efb44 DO NOT MERGE Fix unexpected behavior in smp_sm_event by Hansong Zhang · 7 years ago
  13. 8ea5dc3 DO NOT MERGE Truncate new line characters when adding string to config by Hansong Zhang · 7 years ago
  14. c134769 DO NOT MERGE: SDP: Check p_req_end before reading from p_req by Myles Watson · 8 years ago
  15. f628647 Merge "SDP: Pass the bounds to process_service_*_rsp" into mnc-dev by TreeHugger Robot · 8 years ago
  16. a8b9513 Merge "DO NOT MERGE: AVRCP: Check the number of text attributes requested" into mnc-dev by Ajay Panicker · 8 years ago
  17. e85671d Merge "DO NOT MERGE: AVRCP: Check the number of text value attributes requested" into mnc-dev by TreeHugger Robot · 8 years ago
  18. 74904e1 BNEP: Check received frame type by Myles Watson · 8 years ago
  19. 2dbd634 Merge "PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 8 years ago
  20. 8f8372b Merge "DO NOT MERGE Remove memory reference to invalid mem in error log" into mnc-dev by TreeHugger Robot · 8 years ago
  21. b8756ee SDP: Pass the bounds to process_service_*_rsp by Myles Watson · 8 years ago
  22. ae339de Merge "DO NOT MERGE Fix unexpected behavior in reading BNEP packets" into mnc-dev by Hansong Zhang · 8 years ago
  23. 2fbcfd9 DO NOT MERGE Fix unexpected behavior in reading BNEP packets by Hansong Zhang · 8 years ago
  24. ca4de85 DO NOT MERGE Remove memory reference to invalid mem in error log by Stanley Tng · 8 years ago
  25. b141702 PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback by Myles Watson · 8 years ago
  26. 7b9fb0e DO NOT MERGE: AVRCP: Check the number of text value attributes requested by Ajay Panicker · 8 years ago
  27. bbcd6e8 DO NOT MERGE: AVRCP: Check the number of text attributes requested by Ajay Panicker · 8 years ago
  28. 6ee3d8e DO NOT MERGE Fix unexpected behavior in SDP by Hansong Zhang · 8 years ago
  29. ec778d7 SDP: Bounds check 'id' parameter for free_sdp_slot() by Andre Eisenbach · 8 years ago
  30. df7252a Merge "Add missing extension length check while parsing BNEP control packets" into mnc-dev by TreeHugger Robot · 8 years ago
  31. 8f8598b Add missing extension length check while parsing BNEP control packets by Pavlin Radoslavov · 8 years ago
  32. 309bc9a Free p_pending_data from tBNEP_CONN to avoid potential memory leaks by Pavlin Radoslavov · 8 years ago
  33. 45db9ed Merge "Add a missing check for PAN buffer size before copying data" into mnc-dev by TreeHugger Robot · 8 years ago
  34. dece8b7 Merge "Add missing packet length checks while parsing BNEP control packets" into mnc-dev by TreeHugger Robot · 8 years ago
  35. 9bffc43 Merge "Add missing continuation offset check for SDP continuation requests" into mnc-dev by TreeHugger Robot · 8 years ago
  36. 7645a78 Merge "Allocate buffers of the right size when BT_HDR is included" into mnc-dev by TreeHugger Robot · 8 years ago
  37. 8da95da Add missing packet length checks while parsing BNEP control packets by Pavlin Radoslavov · 8 years ago
  38. d3147b5 Add missing continuation offset check for SDP continuation requests by Pavlin Radoslavov · 8 years ago
  39. c497197 Disable PAN Reverse Tethering when connection originated by the Remote by Pavlin Radoslavov · 8 years ago
  40. 0062237 Add a missing check for PAN buffer size before copying data by Pavlin Radoslavov · 8 years ago
  41. fedd8da Allocate buffers of the right size when BT_HDR is included by Pavlin Radoslavov · 8 years ago
  42. c4d3262 Check LE advertising data length before caching advertising records by Jack He · 8 years ago
  43. afa95bb Check the HCI length before extracting the L2CAP length and CID by Pavlin Radoslavov · 8 years ago
  44. dcde22e DO NOT MERGE Fix potential DoS caused by delivering signal to BT process by Sharvil Nanavati · 9 years ago
  45. 5c13030 Merge "Add guest mode functionality (2/3)" into mnc-dev by Ajay Panicker · 9 years ago
  46. 7202554 DO NOT MERGE btif: check overflow on create_pbuf size by Marie Janssen · 9 years ago
  47. 1c3c997 Add guest mode functionality (2/3) by Ajay Panicker · 9 years ago
  48. a64dfa5 btif: Don't persist remote devices to the config by Marie Janssen · 9 years ago
  49. 8ba94f6 DO NOT MERGE Check size of pin before replying by Marie Janssen · 9 years ago
  50. 16fbb21 DO NOT MERGE Remove Porsche car-kit pairing workaround by Andre Eisenbach · 10 years ago
  51. 2477760 Fix crashes with lots of discovered LE devices by Marie Janssen · 10 years ago
  52. 47a9271 Disable opening network debug ports for security reasons by Pavlin Radoslavov · 10 years ago
  53. 1de7423 LE Multi-Advertising State Change Sub-event Wrong Variable Type by Jacob Lee · 10 years ago
  54. cb40feb Fix incorrect SetConnScanParam function mapping by Sunny Kapdi · 10 years ago
  55. 4899f30 Fix memory corruption of BLE whitelist hashmap by Nitin Arora · 10 years ago
  56. cffc31f Check the return value when reading HCI type byte by Pavlin Radoslavov · 10 years ago
  57. 450b114 Disable remote TCP connections by Pavlin Radoslavov · 10 years ago
  58. 7316b50 Merge "[DS] BTM_VSC_CHIP_CAPABILITY_M_VERSION doesn't match" into mnc-dev by Iliyan Malchev · 10 years ago
  59. a69a527 Allocate large enough buffers when copying AVRC packets by Satya Calloji · 10 years ago
  60. 32b9b51 [DS] BTM_VSC_CHIP_CAPABILITY_M_VERSION doesn't match by Jacob Lee · 10 years ago
  61. ec10208 Implement Bluetooth settings factory reset (3/5) by Ajay Panicker · 10 years ago
  62. cef895a Add Dialog mouse & KB to blacklist for LE secure connections by Nitin Arora · 10 years ago
  63. 9e6ca5d Add an explicit check for AVRCP vendor data by Pavlin Radoslavov · 10 years ago
  64. 4b2932f Fix a crash for a race condition during Bluetooth shutdown by Pavlin Radoslavov · 10 years ago
  65. 06be231 Fix CTS Verifier test for insecure RFCOMM connection. by Sharvil Nanavati · 10 years ago
  66. c435a11 Fix a NULL-pointer crash by Pavlin Radoslavov · 10 years ago
  67. 6ed24c4 Assign pseudo address for host-based RPA resolution matches by Andre Eisenbach · 10 years ago
  68. 272434e Fix memory leak in A2DP event handler by Andre Eisenbach · 10 years ago
  69. 90d19e9 Reset LE encryption key size at LE disconnection only by Nitin Arora · 10 years ago
  70. ac2f059 Promote AVCTP version to 1.4 by Anubhav Gupta · 10 years ago
  71. 0faeacd Fix a bug allocating buffers for fragmented AVRC packets by Anubhav Gupta · 10 years ago
  72. 41cc9f7 Fix for uhid_event size check by Amirhossein Simjour · 10 years ago
  73. 117b269 Unpair HID device cleanup by Casper Bonde · 11 years ago
  74. aae42a4 Fix the logic for stopping the Power Management timers. by Pavlin Radoslavov · 10 years ago
  75. bc358ad Fix TX queue overflow detection by Andre Eisenbach · 10 years ago
  76. fab7155 Customize Bluetooth sniff interval by Pavlin Radoslavov · 10 years ago
  77. d8c7b26 Fix a crash for a race condition during Bluetooth shutdown by Pavlin Radoslavov · 10 years ago
  78. 3a2c94b Update device type correctly in the NVRAM at inquiry result by Nitin Arora · 10 years ago
  79. 192c95d Use pseudo address while re-pairing peripheral by Nitin Arora · 10 years ago
  80. 5dfd8a9 Adding transport type while initiating remote discovery by Nitin Arora · 10 years ago
  81. 329469d Fix potential crash when transcoding legacy config files by Andre Eisenbach · 10 years ago
  82. b001e0d Enable enhanced connection complete event by Nitin Arora · 10 years ago
  83. e5c71dd Fix the logic for removing bonded devices by Pavlin Radoslavov · 10 years ago
  84. 0ee7184 Exclude Polar HR Monitor from secure conn by tturney · 10 years ago
  85. aa82a24 Fix multi-advertising when LE Privacy is not available by Arman Uguray · 10 years ago
  86. fa8ba1e Add Moto Key Link to blacklist for LE secure connections by Nitin Arora · 10 years ago
  87. 133fc58 Properly disconnect GATT connection during noisy scans by Arman Uguray · 10 years ago
  88. 6cefe2c Cleanup alarm_get_remaining_ms by Andre Eisenbach · 10 years ago
  89. b1d1b4d Use correct own address type for batch scan by Nitin Arora · 10 years ago
  90. f1458e8 Bug fix PM changes and LE connectivity mode fixes by VenkatRaghavan VijayaRaghavan · 10 years ago
  91. ff840eb Store the link key derived from cross tranport link key by Srinu Jella · 10 years ago
  92. 3df6164 Add additional BDA ranges for Nexus Remote workaround by Andre Eisenbach · 10 years ago
  93. 1bb6c70 Additional BDA range for Nexus Remote secure connections blacklist by Andre Eisenbach · 10 years ago
  94. 1663b4e Move pairing auto-retry workaround to new interop db by Andre Eisenbach · 10 years ago
  95. 3ef673f Do not reject valid connection parameter updates by Andre Eisenbach · 10 years ago
  96. 2eb1790 Fix a bug when responding to AVRCP UNIT_INFO and SUBUNIT_INFO by Pavlin Radoslavov · 10 years ago
  97. 26a4a1d Fail LE secure pairing for secure only peripherals by Nitin Arora · 10 years ago
  98. 9279b62 Reset the ACL connection data on ACL disconnection by Srinu Jella · 10 years ago
  99. 7e9172a Fix security vulnerabilities in string operations by Miao Chou · 10 years ago
  100. a00bde5a Add missing data initialization by Pavlin Radoslavov · 10 years ago