1. f078f78 DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr by Myles Watson · 7 years ago
  2. d5228d7 Fix possible OOB read in process_service_search_rsp by Jakub Pawlowski · 7 years ago
  3. 35f419c DO NOT MERGE - Check SDU lower bound before allocate p_data by Ugo Yu · 7 years ago
  4. 3dd70a7 Merge "DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses" into nyc-dev by TreeHugger Robot · 7 years ago
  5. 3157201 DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() by Pavlin Radoslavov · 7 years ago
  6. ffc0d8f DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses by Pavlin Radoslavov · 7 years ago
  7. daf5354 Merge "Checks the SMP length to fix OOB read" into nyc-dev by TreeHugger Robot · 7 years ago
  8. 3ee9ccd Merge "DO NOT MERGE Add packet length check in smp_proc_master_id" into nyc-dev by TreeHugger Robot · 7 years ago
  9. d21277c Merge "DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback" into nyc-dev by TreeHugger Robot · 7 years ago
  10. 3272013 Merge "DO NOT MERGE Check packet length in bta_av_proc_meta_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  11. 1c86106 Merge "DO NOT MERGE Fix OOB read before buffer length check" into nyc-dev by TreeHugger Robot · 7 years ago
  12. 9265f65 DO NOT MERGE Add packet length check in smp_proc_master_id by Ugo Yu · 7 years ago
  13. 9a1046a Checks the SMP length to fix OOB read by Cheney Ni · 7 years ago
  14. c4cfe6c Fix copy length calculation in sdp_copy_raw_data by Jakub Pawlowski · 7 years ago
  15. 24dc32e Merge "DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp" into nyc-dev by TreeHugger Robot · 7 years ago
  16. cd5d134 Merge "DO NOT MERGE Check remaining frame length in rfc_process_mx_message" into nyc-dev by Hansong Zhang · 7 years ago
  17. 3192d75 DO NOT MERGE Check remaining frame length in rfc_process_mx_message by Hansong Zhang · 7 years ago
  18. b2a66cf DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback by Pavlin Radoslavov · 7 years ago
  19. 9fccd69 DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req by Cheney Ni · 7 years ago
  20. 50b85db DO NOT MERGE Check packet length in bta_av_proc_meta_cmd by Chienyuan · 7 years ago
  21. 6fe963e DO NOT MERGE Fix OOB read before buffer length check by Ugo Yu · 7 years ago
  22. e8f2311 DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp by Hansong Zhang · 7 years ago
  23. 8888305 Merge "DO NOT MERGE SDP: Fix the param_len recalculation" into nyc-dev by TreeHugger Robot · 7 years ago
  24. fa2d999 DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  25. 61a380b [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 am: 0fa926c060 skipped: 256c8f875f by Android Build Merger (Role) · 7 years ago
  26. 256c8f8 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 am: 0fa926c060 by Android Build Merger (Role) · 7 years ago
  27. 0fa926c [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 am: 3eb8f15589 by Android Build Merger (Role) · 7 years ago
  28. 3eb8f15 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 1bd445ffc2 by Android Build Merger (Role) · 7 years ago
  29. 1bd445f DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  30. 29a622a DO NOT MERGE Fix a wrong check in rfc_parse_data by Hansong Zhang · 7 years ago
  31. 20a4f37 DO NOT MERGE Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  32. 444c782 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 skipped: f8a2d13651 skipped: 1eaf9dff0a by Android Build Merger (Role) · 7 years ago
  33. 1eaf9df [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 skipped: f8a2d13651 by Android Build Merger (Role) · 7 years ago
  34. f8a2d13 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f skipped: c91a3c73d7 by Android Build Merger (Role) · 7 years ago
  35. c91a3c7 [automerger skipped] Add bound check for rfc_parse_data skipped: d3c8e6b86f by Android Build Merger (Role) · 7 years ago
  36. d3c8e6b Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  37. 4d19d91 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 am: 3d132a364b skipped: 50bda6b91e by Android Build Merger (Role) · 7 years ago
  38. 50bda6b [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 am: 3d132a364b by Android Build Merger (Role) · 7 years ago
  39. 3d132a3 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e am: e1061d4ba8 by Android Build Merger (Role) · 7 years ago
  40. e1061d4 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 720d83a84e by Android Build Merger (Role) · 7 years ago
  41. 720d83a Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  42. f39033c Merge "Fix out of bounds read in l2c_rcv_acl_data" into nyc-dev by Jakub Pawlowski · 7 years ago
  43. 0b104d1 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 am: 8477459858 am: caeb84cdef by Android Build Merger (Role) · 7 years ago
  44. caeb84c [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 am: 8477459858 by Android Build Merger (Role) · 7 years ago
  45. 8477459 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 am: 21eb7b1734 by Android Build Merger (Role) · 7 years ago
  46. 21eb7b1 [automerger] BLE: Don't access freed buffer in log message am: 53a89d92d9 by Android Build Merger (Role) · 7 years ago
  47. 53a89d9 BLE: Don't access freed buffer in log message by Nitin Shivpure · 7 years ago
  48. 22651ae Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  49. a4c8494 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 am: 7e71b81d46 skipped: 3c3d27d0a4 by Android Build Merger (Role) · 7 years ago
  50. 3c3d27d [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 am: 7e71b81d46 by Android Build Merger (Role) · 7 years ago
  51. 7e71b81 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d am: 48833b2b66 by Android Build Merger (Role) · 7 years ago
  52. 48833b2 [automerger] Add packet length checks in l2cble_process_sig_cmd am: fb614b995d by Android Build Merger (Role) · 7 years ago
  53. fb614b9 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  54. 95b999f Don't use Address after it was deleted by Jakub Pawlowski · 7 years ago
  55. d89048b Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  56. 375c0c2 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into nyc-dev by TreeHugger Robot · 7 years ago
  57. 5261fc6 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr1.5-dev by TreeHugger Robot · 7 years ago
  58. 78db2b8 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into cw-e-dev by TreeHugger Robot · 7 years ago
  59. e6b755d Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  60. 6c619e9 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into mnc-dev by TreeHugger Robot · 7 years ago
  61. b82d540 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dev by TreeHugger Robot · 7 years ago
  62. 06bf297 Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  63. 379c3ad DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  64. 1141925 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 am: 350d2091a7 am: 35e2713004 by Android Build Merger (Role) · 7 years ago
  65. 35e2713 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 am: 350d2091a7 by Android Build Merger (Role) · 7 years ago
  66. 350d209 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 am: 6ca0047253 by Android Build Merger (Role) · 7 years ago
  67. 6ca0047 [automerger] SDP: return error on offset bigger than atribute length am: 0de61ca638 by Android Build Merger (Role) · 7 years ago
  68. 0de61ca SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 7 years ago
  69. 5d718c2 Merge "DO NOT MERGE HFP: Fix out of bound access in phone number processing" into nyc-dev by TreeHugger Robot · 7 years ago
  70. a080096 DO NOT MERGE HFP: Fix out of bound access in phone number processing by Jack He · 7 years ago
  71. 32df36d DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  72. e50ff88 [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 am: 952125739d skipped: 9e1283f639 by Android Build Merger (Role) · 7 years ago
  73. 9e1283f [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 am: 952125739d by Android Build Merger (Role) · 7 years ago
  74. 9521257 [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d am: 4db238e1d7 by Android Build Merger (Role) · 7 years ago
  75. 4db238e [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 079d63f03d by Android Build Merger (Role) · 7 years ago
  76. 079d63f DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  77. cd8e6d1 Merge "DO NOT MERGE: Don't reuse buffer when building response" into nyc-dev by TreeHugger Robot · 7 years ago
  78. 4510452 DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  79. 5348161 [automerger] DO NOT MERGE: Don't reuse buffer when building response am: e607b1af87 am: 703d03f243 am: 51f9423da8 skipped: 7c6500be44 by Android Build Merger (Role) · 7 years ago
  80. 7c6500b [automerger] DO NOT MERGE: Don't reuse buffer when building response am: e607b1af87 am: 703d03f243 am: 51f9423da8 by Android Build Merger (Role) · 7 years ago
  81. 51f9423 [automerger] DO NOT MERGE: Don't reuse buffer when building response am: e607b1af87 am: 703d03f243 by Android Build Merger (Role) · 7 years ago
  82. 703d03f [automerger] DO NOT MERGE: Don't reuse buffer when building response am: e607b1af87 by Android Build Merger (Role) · 7 years ago
  83. e607b1a DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  84. 8af338c [automerger] Add checks whether the AVDTP element data length is valid am: 16918ee14c am: 5438eb5c04 am: ac26a12e29 am: 3bf9c7f5d1 by Android Build Merger (Role) · 7 years ago
  85. 3bf9c7f [automerger] Add checks whether the AVDTP element data length is valid am: 16918ee14c am: 5438eb5c04 am: ac26a12e29 by Android Build Merger (Role) · 7 years ago
  86. ac26a12 [automerger] Add checks whether the AVDTP element data length is valid am: 16918ee14c am: 5438eb5c04 by Android Build Merger (Role) · 7 years ago
  87. 5438eb5 [automerger] Add checks whether the AVDTP element data length is valid am: 16918ee14c by Android Build Merger (Role) · 7 years ago
  88. 16918ee Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 7 years ago
  89. fb21685 DO NOT MERGE BNEP: Fix build breakage by using osi_free instead of GKI_freebuf by Jack He · 7 years ago
  90. 748e849 [automerger] BNEP: Fix OOB access in bnep_data_ind am: d2e3440419 am: 3cc64eae8d am: 2179351a4f am: 54c3c4c489 by Android Build Merger (Role) · 7 years ago
  91. 54c3c4c [automerger] BNEP: Fix OOB access in bnep_data_ind am: d2e3440419 am: 3cc64eae8d am: 2179351a4f by Android Build Merger (Role) · 7 years ago
  92. 2179351 [automerger] BNEP: Fix OOB access in bnep_data_ind am: d2e3440419 am: 3cc64eae8d by Android Build Merger (Role) · 7 years ago
  93. 3cc64ea [automerger] BNEP: Fix OOB access in bnep_data_ind am: d2e3440419 by Android Build Merger (Role) · 7 years ago
  94. d2e3440 BNEP: Fix OOB access in bnep_data_ind by Jack He · 7 years ago
  95. 0d822c3 [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: cd26d8d654 am: 2e1be2f7de am: 5ba11e619b am: c4328ca94a by Android Build Merger (Role) · 7 years ago
  96. c4328ca [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: cd26d8d654 am: 2e1be2f7de am: 5ba11e619b by Android Build Merger (Role) · 7 years ago
  97. 5ba11e6 [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: cd26d8d654 am: 2e1be2f7de by Android Build Merger (Role) · 7 years ago
  98. 2e1be2f [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: cd26d8d654 by Android Build Merger (Role) · 7 years ago
  99. cd26d8d Fixes two bluetooth bugs causing remote overreads (2/2) by akirilov · 7 years ago
  100. c114a02 [automerger] Decrease length after reading from array in process_service_attr_req am: dc70c1e134 am: 72d8402186 am: 09e657a082 am: f34d94985b by Android Build Merger (Role) · 7 years ago