1. e1061d4 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e by Android Build Merger (Role) · 7 years ago
  2. 720d83a Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  3. 21eb7b1 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 by Android Build Merger (Role) · 7 years ago
  4. 53a89d9 BLE: Don't access freed buffer in log message by Nitin Shivpure · 8 years ago
  5. 48833b2 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d by Android Build Merger (Role) · 7 years ago
  6. fb614b9 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  7. e6b755d Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  8. 6c619e9 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into mnc-dev by TreeHugger Robot · 7 years ago
  9. 6ca0047 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 by Android Build Merger (Role) · 7 years ago
  10. 0de61ca SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 7 years ago
  11. 4db238e [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d by Android Build Merger (Role) · 7 years ago
  12. 079d63f DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  13. 703d03f [automerger] DO NOT MERGE: Don't reuse buffer when building response am: e607b1af87 by Android Build Merger (Role) · 7 years ago
  14. e607b1a DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  15. 5438eb5 [automerger] Add checks whether the AVDTP element data length is valid am: 16918ee14c by Android Build Merger (Role) · 7 years ago
  16. 16918ee Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 7 years ago
  17. 3cc64ea [automerger] BNEP: Fix OOB access in bnep_data_ind am: d2e3440419 by Android Build Merger (Role) · 7 years ago
  18. d2e3440 BNEP: Fix OOB access in bnep_data_ind by Jack He · 7 years ago
  19. 2e1be2f [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: cd26d8d654 by Android Build Merger (Role) · 7 years ago
  20. cd26d8d Fixes two bluetooth bugs causing remote overreads (2/2) by akirilov · 7 years ago
  21. 72d8402 [automerger] Decrease length after reading from array in process_service_attr_req am: dc70c1e134 by Android Build Merger (Role) · 7 years ago
  22. dc70c1e Decrease length after reading from array in process_service_attr_req by Jakub Pawlowski · 7 years ago
  23. 27ad590 Merge changes from topic "am-0ee00745-3175-4746-9daa-2f8a6e252eaa" into mnc-dr-dev by Atanas Kirilov · 7 years ago
  24. 9d2bbea Merge "RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2)" into mnc-dev by Atanas Kirilov · 7 years ago
  25. fad66c0 Merge changes from topic "am-f4bfe0c3-4263-420c-abf9-a0e5b20986ff" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  26. 95c191a Merge "DO NOT MERGE: SDP: Recalculate param_len after max_list_len" into mnc-dev by TreeHugger Robot · 7 years ago
  27. 454a595 Merge "DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event" into mnc-dev by TreeHugger Robot · 7 years ago
  28. 0393d44 [automerger] DO NOT MERGE: SDP: Recalculate param_len after max_list_len am: a6d9c14313 by Android Build Merger (Role) · 7 years ago
  29. a6d9c14 DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 7 years ago
  30. 103766a [automerger] DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event am: 8020e3844c by Android Build Merger (Role) · 7 years ago
  31. 8020e38 DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event by Hansong Zhang · 7 years ago
  32. b46baa6 [automerger] GATT: Handle too short Error Response PDU am: b91518ff7d by Android Build Merger (Role) · 7 years ago
  33. b91518f GATT: Handle too short Error Response PDU by Jakub Pawlowski · 7 years ago
  34. 192f25f [automerger] Add PDU size checks in process_service_search_attr_rsp am: 63967b140a by Android Build Merger (Role) · 7 years ago
  35. 63967b1 Add PDU size checks in process_service_search_attr_rsp by Jakub Pawlowski · 7 years ago
  36. f5e0e9d [automerger] RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2) am: d511dbcbc5 by Android Build Merger (Role) · 7 years ago
  37. d511dbc RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2) by akirilov · 7 years ago
  38. 076f4ca [automerger] DO NOT MERGE Prevent stack overflow in btif_storage am: 7333659a9a by Android Build Merger (Role) · 7 years ago
  39. 7333659 DO NOT MERGE Prevent stack overflow in btif_storage by Hansong Zhang · 7 years ago
  40. c29fcf8 [automerger] DO NOT MERGE SMP: Validate remote elliptic curve points am: eb31324874 by Android Build Merger (Role) · 7 years ago
  41. eb31324 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 7 years ago
  42. 43c6754 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 7 years ago
  43. 09ec968 Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into mnc-dev by TreeHugger Robot · 7 years ago
  44. 902fb02 Merge changes from topic "am-4f00fbdf-3978-4c02-91d3-d55eeb01b9a9-mnc-dev" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  45. d388663 [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 5934e704aa by Android Build Merger (Role) · 7 years ago
  46. 5934e70 DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  47. 123cfde [automerger] DO NOT MERGE Add bounds check for BNEP_Write am: b7ffb21711 by Android Build Merger (Role) · 7 years ago
  48. b7ffb21 DO NOT MERGE Add bounds check for BNEP_Write by Hansong Zhang · 7 years ago
  49. 70e716c Merge changes from topic "am-c847555c-4096-4a49-be7e-49a3a9c0417a" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  50. 254939b Merge "DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 7 years ago
  51. 79e8185 Merge changes from topic "mnc-dev-check-pkt-when-processing-gatt-reads2" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  52. 41cb06f Merge "DO NOT MERGE Handle bad packet length in gatts_process_read_req" into mnc-dev by TreeHugger Robot · 7 years ago
  53. df211ba Merge changes from topic "am-3af7df0e-526d-4f8d-8ff1-cc32970b6656" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  54. 93ed762 Merge "DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result" into mnc-dev by TreeHugger Robot · 7 years ago
  55. 351db3c [automerger] DO NOT MERGE Handle bad packet length in gatts_process_read_req am: e7cdfed808 by Android Build Merger (Role) · 7 years ago
  56. e7cdfed DO NOT MERGE Handle bad packet length in gatts_process_read_req by Stanley Tng · 7 years ago
  57. 6f1bb0e [automerger] DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback am: aa349da004 by Android Build Merger (Role) · 7 years ago
  58. aa349da DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback by Myles Watson · 7 years ago
  59. c074592 [automerger] DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result am: c361d98bff by Android Build Merger (Role) · 7 years ago
  60. c361d98 DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result by Hansong Zhang · 7 years ago
  61. becc7df [automerger] DO NOT MERGE Fix unexpected behavior in smp_sm_event am: 42efb44561 by Android Build Merger (Role) · 7 years ago
  62. 42efb44 DO NOT MERGE Fix unexpected behavior in smp_sm_event by Hansong Zhang · 7 years ago
  63. 9b02e37 [automerger] DO NOT MERGE Truncate new line characters when adding string to config am: 8ea5dc3511 by Android Build Merger (Role) · 8 years ago
  64. 8ea5dc3 DO NOT MERGE Truncate new line characters when adding string to config by Hansong Zhang · 8 years ago
  65. 14b050b [automerger] DO NOT MERGE: SDP: Check p_req_end before reading from p_req am: c134769976 by Android Build Merger (Role) · 8 years ago
  66. c134769 DO NOT MERGE: SDP: Check p_req_end before reading from p_req by Myles Watson · 8 years ago
  67. 4c9caad Merge "SDP: Pass the bounds to process_service_*_rsp" into mnc-dev by Myles Watson · 8 years ago
  68. f628647 Merge "SDP: Pass the bounds to process_service_*_rsp" into mnc-dev by TreeHugger Robot · 8 years ago
  69. 7308e71 Merge "DO NOT MERGE: AVRCP: Check the number of text attributes requested" into mnc-dev by Ajay Panicker · 8 years ago
  70. a8b9513 Merge "DO NOT MERGE: AVRCP: Check the number of text attributes requested" into mnc-dev by Ajay Panicker · 8 years ago
  71. 6fe3667 Merge "DO NOT MERGE: AVRCP: Check the number of text value attributes requested" into mnc-dev by Ajay Panicker · 8 years ago
  72. e85671d Merge "DO NOT MERGE: AVRCP: Check the number of text value attributes requested" into mnc-dev by TreeHugger Robot · 8 years ago
  73. aafa1f9 BNEP: Check received frame type am: 74904e1943 by Myles Watson · 8 years ago
  74. 575dd66 Merge "PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback" into mnc-dev by Myles Watson · 8 years ago
  75. 74904e1 BNEP: Check received frame type by Myles Watson · 8 years ago
  76. 2dbd634 Merge "PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 8 years ago
  77. 67e288b Merge "DO NOT MERGE Remove memory reference to invalid mem in error log" into mnc-dev by Stanley Tng · 8 years ago
  78. 8f8372b Merge "DO NOT MERGE Remove memory reference to invalid mem in error log" into mnc-dev by TreeHugger Robot · 8 years ago
  79. b8756ee SDP: Pass the bounds to process_service_*_rsp by Myles Watson · 8 years ago
  80. 9162f54 Merge "DO NOT MERGE Fix unexpected behavior in reading BNEP packets" into mnc-dev by Hansong Zhang · 8 years ago
  81. 24f55d1 DO NOT MERGE Fix unexpected behavior in SDP am: 6ee3d8e16c by Hansong Zhang · 8 years ago
  82. ae339de Merge "DO NOT MERGE Fix unexpected behavior in reading BNEP packets" into mnc-dev by Hansong Zhang · 8 years ago
  83. 2fbcfd9 DO NOT MERGE Fix unexpected behavior in reading BNEP packets by Hansong Zhang · 8 years ago
  84. ca4de85 DO NOT MERGE Remove memory reference to invalid mem in error log by Stanley Tng · 8 years ago
  85. b141702 PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback by Myles Watson · 8 years ago
  86. 7b9fb0e DO NOT MERGE: AVRCP: Check the number of text value attributes requested by Ajay Panicker · 8 years ago
  87. bbcd6e8 DO NOT MERGE: AVRCP: Check the number of text attributes requested by Ajay Panicker · 8 years ago
  88. 6ee3d8e DO NOT MERGE Fix unexpected behavior in SDP by Hansong Zhang · 8 years ago
  89. fee7b7e SDP: Bounds check 'id' parameter for free_sdp_slot() am: ec778d7ce6 by Andre Eisenbach · 8 years ago
  90. ec778d7 SDP: Bounds check 'id' parameter for free_sdp_slot() by Andre Eisenbach · 8 years ago
  91. b52787b Merge "Add missing extension length check while parsing BNEP control packets" into mnc-dev by Pavlin Radoslavov · 8 years ago
  92. 503ce45 Free p_pending_data from tBNEP_CONN to avoid potential memory leaks by Pavlin Radoslavov · 8 years ago
  93. df7252a Merge "Add missing extension length check while parsing BNEP control packets" into mnc-dev by TreeHugger Robot · 8 years ago
  94. 8f8598b Add missing extension length check while parsing BNEP control packets by Pavlin Radoslavov · 8 years ago
  95. 309bc9a Free p_pending_data from tBNEP_CONN to avoid potential memory leaks by Pavlin Radoslavov · 8 years ago
  96. 2b61a4f Merge "Add a missing check for PAN buffer size before copying data" into mnc-dev by Pavlin Radoslavov · 8 years ago
  97. 45db9ed Merge "Add a missing check for PAN buffer size before copying data" into mnc-dev by TreeHugger Robot · 8 years ago
  98. 39fc1e7 Merge "Add missing packet length checks while parsing BNEP control packets" into mnc-dev by Pavlin Radoslavov · 8 years ago
  99. 4526243 Merge "Add missing continuation offset check for SDP continuation requests" into mnc-dev by Pavlin Radoslavov · 8 years ago
  100. 1333ab6 Merge "Allocate buffers of the right size when BT_HDR is included" into mnc-dev by Pavlin Radoslavov · 8 years ago