1. 163dec2 DO NOT MERGE HFP: Check AT command buffer boundary during parsing by Chienyuan · 7 years ago
  2. ad4098c DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data by Ugo Yu · 7 years ago
  3. b6fa6e4 Fix possible OOB read in process_service_search_rsp by Jakub Pawlowski · 7 years ago
  4. 87bcda8 DO NOT MERGE - Check SDU lower bound before allocate p_data by Ugo Yu · 7 years ago
  5. 8a476f9 Merge "DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses" into nyc-dev by TreeHugger Robot · 7 years ago
  6. b4cf841 DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() by Pavlin Radoslavov · 7 years ago
  7. 8148397 DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses by Pavlin Radoslavov · 7 years ago
  8. 425dd8d Merge "Checks the SMP length to fix OOB read" into nyc-dev by TreeHugger Robot · 7 years ago
  9. 68ceaaf Merge "DO NOT MERGE Add packet length check in smp_proc_master_id" into nyc-dev by TreeHugger Robot · 7 years ago
  10. 94aec42 Merge "DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback" into nyc-dev by TreeHugger Robot · 7 years ago
  11. 82d40b4 Merge "DO NOT MERGE Check packet length in bta_av_proc_meta_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  12. ceafc50 Merge "DO NOT MERGE Fix OOB read before buffer length check" into nyc-dev by TreeHugger Robot · 7 years ago
  13. 36bbbbf DO NOT MERGE Add packet length check in smp_proc_master_id by Ugo Yu · 7 years ago
  14. 353faee Checks the SMP length to fix OOB read by Cheney Ni · 7 years ago
  15. 1a0571a Fix copy length calculation in sdp_copy_raw_data by Jakub Pawlowski · 7 years ago
  16. 00565f6 Merge "DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp" into nyc-dev by TreeHugger Robot · 7 years ago
  17. 90ec1c9 Merge "DO NOT MERGE Check remaining frame length in rfc_process_mx_message" into nyc-dev by Hansong Zhang · 7 years ago
  18. 53e8b94 DO NOT MERGE Check remaining frame length in rfc_process_mx_message by Hansong Zhang · 7 years ago
  19. b78d265 DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback by Pavlin Radoslavov · 7 years ago
  20. fb5115a DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req by Cheney Ni · 7 years ago
  21. 82815f4 DO NOT MERGE Check packet length in bta_av_proc_meta_cmd by Chienyuan · 7 years ago
  22. e64b4a3 DO NOT MERGE Fix OOB read before buffer length check by Ugo Yu · 7 years ago
  23. 082353a DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp by Hansong Zhang · 7 years ago
  24. 28a63ac Merge "DO NOT MERGE SDP: Fix the param_len recalculation" into nyc-dev by TreeHugger Robot · 7 years ago
  25. 51b656f DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  26. 5addfc4 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 7b2d711d9e am: 43d4bf00eb am: 7d92fdbb23 skipped: 58417f9233 by Android Build Merger (Role) · 7 years ago
  27. 58417f9 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 7b2d711d9e am: 43d4bf00eb am: 7d92fdbb23 by Android Build Merger (Role) · 7 years ago
  28. 7d92fdb [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 7b2d711d9e am: 43d4bf00eb by Android Build Merger (Role) · 7 years ago
  29. 43d4bf0 [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 7b2d711d9e by Android Build Merger (Role) · 7 years ago
  30. 7b2d711 DO NOT MERGE SDP: Fix the param_len recalculation by Hansong Zhang · 7 years ago
  31. 4cea938 DO NOT MERGE Fix a wrong check in rfc_parse_data by Hansong Zhang · 7 years ago
  32. ee82a40 DO NOT MERGE Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  33. 7c03b49 [automerger skipped] Add bound check for rfc_parse_data skipped: 1b9a465eea skipped: 5741c6951e skipped: aa697e3f87 skipped: b1f262ed40 by Android Build Merger (Role) · 7 years ago
  34. b1f262e [automerger skipped] Add bound check for rfc_parse_data skipped: 1b9a465eea skipped: 5741c6951e skipped: aa697e3f87 by Android Build Merger (Role) · 7 years ago
  35. aa697e3 [automerger skipped] Add bound check for rfc_parse_data skipped: 1b9a465eea skipped: 5741c6951e by Android Build Merger (Role) · 7 years ago
  36. 5741c69 [automerger skipped] Add bound check for rfc_parse_data skipped: 1b9a465eea by Android Build Merger (Role) · 7 years ago
  37. 1b9a465 Add bound check for rfc_parse_data by Hansong Zhang · 7 years ago
  38. c4a8457 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 9bf8cb2683 am: 4a370bbdc5 am: 2e08a14470 skipped: e4460d953d by Android Build Merger (Role) · 7 years ago
  39. e4460d9 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 9bf8cb2683 am: 4a370bbdc5 am: 2e08a14470 by Android Build Merger (Role) · 7 years ago
  40. 2e08a14 [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 9bf8cb2683 am: 4a370bbdc5 by Android Build Merger (Role) · 7 years ago
  41. 4a370bb [automerger] Fix out of bounds read in l2c_rcv_acl_data am: 9bf8cb2683 by Android Build Merger (Role) · 7 years ago
  42. 9bf8cb2 Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  43. 4b08151 Merge "Fix out of bounds read in l2c_rcv_acl_data" into nyc-dev by Jakub Pawlowski · 7 years ago
  44. e25f074 [automerger] BLE: Don't access freed buffer in log message am: 6c7c67817d am: ee283d67bf am: ba7e4b88ca am: 36f5050f23 by Android Build Merger (Role) · 7 years ago
  45. 36f5050 [automerger] BLE: Don't access freed buffer in log message am: 6c7c67817d am: ee283d67bf am: ba7e4b88ca by Android Build Merger (Role) · 7 years ago
  46. ba7e4b8 [automerger] BLE: Don't access freed buffer in log message am: 6c7c67817d am: ee283d67bf by Android Build Merger (Role) · 7 years ago
  47. ee283d6 [automerger] BLE: Don't access freed buffer in log message am: 6c7c67817d by Android Build Merger (Role) · 7 years ago
  48. 6c7c678 BLE: Don't access freed buffer in log message by Nitin Shivpure · 8 years ago
  49. 32b4726 Fix out of bounds read in l2c_rcv_acl_data by Jakub Pawlowski · 7 years ago
  50. 12860b6 [automerger] Add packet length checks in l2cble_process_sig_cmd am: 3a0aab555f am: 497f11b0fd am: 98366e0b06 skipped: d5ef3c9e76 by Android Build Merger (Role) · 7 years ago
  51. d5ef3c9 [automerger] Add packet length checks in l2cble_process_sig_cmd am: 3a0aab555f am: 497f11b0fd am: 98366e0b06 by Android Build Merger (Role) · 7 years ago
  52. 98366e0 [automerger] Add packet length checks in l2cble_process_sig_cmd am: 3a0aab555f am: 497f11b0fd by Android Build Merger (Role) · 7 years ago
  53. 497f11b [automerger] Add packet length checks in l2cble_process_sig_cmd am: 3a0aab555f by Android Build Merger (Role) · 7 years ago
  54. 3a0aab5 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  55. 2287126 Don't use Address after it was deleted by Jakub Pawlowski · 7 years ago
  56. 329b7cf Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  57. bdb5135 Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into nyc-dev by TreeHugger Robot · 7 years ago
  58. 99c9a4b Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr1.5-dev by TreeHugger Robot · 7 years ago
  59. 3fa5897 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into cw-e-dev by TreeHugger Robot · 7 years ago
  60. 78d473b Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into mnc-dr-dev by TreeHugger Robot · 7 years ago
  61. 041649e Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into mnc-dev by TreeHugger Robot · 7 years ago
  62. c878a27 Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dev by TreeHugger Robot · 7 years ago
  63. 3a9f08a Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into nyc-dev by TreeHugger Robot · 7 years ago
  64. 55afdaf DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  65. 612ba99 [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c by Android Build Merger (Role) · 7 years ago
  66. 05ba051 [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 by Android Build Merger (Role) · 7 years ago
  67. 1c4f9c9 [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca by Android Build Merger (Role) · 7 years ago
  68. 67c78b2 [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d by Android Build Merger (Role) · 7 years ago
  69. 3565eaf SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 7 years ago
  70. f1be73b Merge "DO NOT MERGE HFP: Fix out of bound access in phone number processing" into nyc-dev by TreeHugger Robot · 7 years ago
  71. 82371c1 DO NOT MERGE HFP: Fix out of bound access in phone number processing by Jack He · 7 years ago
  72. 4344cfb DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  73. f2648df [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 by Android Build Merger (Role) · 7 years ago
  74. a866815 [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 by Android Build Merger (Role) · 7 years ago
  75. 56c5b8f [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 by Android Build Merger (Role) · 7 years ago
  76. 7d941ad [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 by Android Build Merger (Role) · 7 years ago
  77. 2da7320 DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  78. 6061833 Merge "DO NOT MERGE: Don't reuse buffer when building response" into nyc-dev by TreeHugger Robot · 7 years ago
  79. ecef51e DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  80. f294bdb [automerger] DO NOT MERGE: Don't reuse buffer when building response am: 5b27fef4d8 am: 4d07934351 am: 690cc6b25d skipped: c4d802659d by Android Build Merger (Role) · 7 years ago
  81. c4d8026 [automerger] DO NOT MERGE: Don't reuse buffer when building response am: 5b27fef4d8 am: 4d07934351 am: 690cc6b25d by Android Build Merger (Role) · 7 years ago
  82. 690cc6b [automerger] DO NOT MERGE: Don't reuse buffer when building response am: 5b27fef4d8 am: 4d07934351 by Android Build Merger (Role) · 7 years ago
  83. 4d07934 [automerger] DO NOT MERGE: Don't reuse buffer when building response am: 5b27fef4d8 by Android Build Merger (Role) · 7 years ago
  84. 5b27fef DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  85. e7c8891 [automerger] Add checks whether the AVDTP element data length is valid am: e192c988cb am: 6b2f63f880 am: ac8793939a am: 862eb4827b by Android Build Merger (Role) · 7 years ago
  86. 862eb48 [automerger] Add checks whether the AVDTP element data length is valid am: e192c988cb am: 6b2f63f880 am: ac8793939a by Android Build Merger (Role) · 7 years ago
  87. ac87939 [automerger] Add checks whether the AVDTP element data length is valid am: e192c988cb am: 6b2f63f880 by Android Build Merger (Role) · 7 years ago
  88. 6b2f63f [automerger] Add checks whether the AVDTP element data length is valid am: e192c988cb by Android Build Merger (Role) · 7 years ago
  89. e192c98 Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 7 years ago
  90. 6245466 DO NOT MERGE BNEP: Fix build breakage by using osi_free instead of GKI_freebuf by Jack He · 7 years ago
  91. 3ba9845 [automerger] BNEP: Fix OOB access in bnep_data_ind am: 0bd01271c4 am: 8f9b349c23 am: 81dcda9a5a am: eee28a5a06 by Android Build Merger (Role) · 7 years ago
  92. eee28a5 [automerger] BNEP: Fix OOB access in bnep_data_ind am: 0bd01271c4 am: 8f9b349c23 am: 81dcda9a5a by Android Build Merger (Role) · 7 years ago
  93. 81dcda9 [automerger] BNEP: Fix OOB access in bnep_data_ind am: 0bd01271c4 am: 8f9b349c23 by Android Build Merger (Role) · 7 years ago
  94. 8f9b349 [automerger] BNEP: Fix OOB access in bnep_data_ind am: 0bd01271c4 by Android Build Merger (Role) · 7 years ago
  95. 0bd0127 BNEP: Fix OOB access in bnep_data_ind by Jack He · 7 years ago
  96. 5793ade [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: 0a8453ba41 am: f60bc5a9a8 am: 9619144b16 am: b37a3d0a19 by Android Build Merger (Role) · 7 years ago
  97. b37a3d0 [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: 0a8453ba41 am: f60bc5a9a8 am: 9619144b16 by Android Build Merger (Role) · 7 years ago
  98. 9619144 [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: 0a8453ba41 am: f60bc5a9a8 by Android Build Merger (Role) · 7 years ago
  99. f60bc5a [automerger] Fixes two bluetooth bugs causing remote overreads (2/2) am: 0a8453ba41 by Android Build Merger (Role) · 7 years ago
  100. 0a8453b Fixes two bluetooth bugs causing remote overreads (2/2) by akirilov · 7 years ago