Gitiles
Code Review Sign In
review.blissroms.org / platform_system_bt / 6c7c67817d426b243eba4b12cd8e13c6041d37a1
  1. 6c7c678 BLE: Don't access freed buffer in log message by Nitin Shivpure · 8 years ago
  2. 3a0aab5 Add packet length checks in l2cble_process_sig_cmd by Jakub Pawlowski · 7 years ago
  3. 041649e Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into mnc-dev by TreeHugger Robot · 7 years ago
  4. 3565eaf SDP: return error on offset bigger than atribute length by Jakub Pawlowski · 7 years ago
  5. 2da7320 DO NOT MERGE HID Host: Check L2CAP packet data length by Hansong Zhang · 7 years ago
  6. 5b27fef DO NOT MERGE: Don't reuse buffer when building response by Ajay Panicker · 7 years ago
  7. e192c98 Add checks whether the AVDTP element data length is valid by Pavlin Radoslavov · 7 years ago
  8. 0bd0127 BNEP: Fix OOB access in bnep_data_ind by Jack He · 7 years ago
  9. 0a8453b Fixes two bluetooth bugs causing remote overreads (2/2) by akirilov · 7 years ago
  10. 76e9628 Decrease length after reading from array in process_service_attr_req by Jakub Pawlowski · 7 years ago
  11. 8f5dfbe Merge "RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2)" into mnc-dev by Atanas Kirilov · 7 years ago
  12. 389789f Merge "DO NOT MERGE: SDP: Recalculate param_len after max_list_len" into mnc-dev by TreeHugger Robot · 7 years ago
  13. 2cf42ff Merge "DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event" into mnc-dev by TreeHugger Robot · 7 years ago
  14. 89f6f14 DO NOT MERGE: SDP: Recalculate param_len after max_list_len by Myles Watson · 7 years ago
  15. cf33d63 DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_event by Hansong Zhang · 7 years ago
  16. 03881d1 GATT: Handle too short Error Response PDU by Jakub Pawlowski · 7 years ago
  17. 3181bde Add PDU size checks in process_service_search_attr_rsp by Jakub Pawlowski · 7 years ago
  18. 6cf3df7 RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2) by akirilov · 7 years ago
  19. 560a624 DO NOT MERGE Prevent stack overflow in btif_storage by Hansong Zhang · 7 years ago
  20. 94dd556 DO NOT MERGE SMP: Validate remote elliptic curve points by Andre Eisenbach · 7 years ago
  21. 404752d Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into mnc-dev by TreeHugger Robot · 7 years ago
  22. 8c2b087 DO NOT MERGE Fix OOB read in process_l2cap_cmd by Hansong Zhang · 7 years ago
  23. 5eaf3a6 DO NOT MERGE Add bounds check for BNEP_Write by Hansong Zhang · 7 years ago
  24. 7c99a01 Merge "DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 7 years ago
  25. 7abed10 Merge "DO NOT MERGE Handle bad packet length in gatts_process_read_req" into mnc-dev by TreeHugger Robot · 7 years ago
  26. c8d9ead Merge "DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result" into mnc-dev by TreeHugger Robot · 7 years ago
  27. dc67046 DO NOT MERGE Handle bad packet length in gatts_process_read_req by Stanley Tng · 7 years ago
  28. 8f34bd0 DO NOT MERGE: PAN: Always allocate in bta_pan_data_buf_ind_cback by Myles Watson · 7 years ago
  29. 4e583ae DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result by Hansong Zhang · 7 years ago
  30. 040aa7b DO NOT MERGE Fix unexpected behavior in smp_sm_event by Hansong Zhang · 7 years ago
  31. bb3b4ed DO NOT MERGE Truncate new line characters when adding string to config by Hansong Zhang · 8 years ago
  32. c5ceedf DO NOT MERGE: SDP: Check p_req_end before reading from p_req by Myles Watson · 8 years ago
  33. f3c4026 Merge "SDP: Pass the bounds to process_service_*_rsp" into mnc-dev by TreeHugger Robot · 8 years ago
  34. 4207e26 Merge "DO NOT MERGE: AVRCP: Check the number of text attributes requested" into mnc-dev by Ajay Panicker · 8 years ago
  35. 90368e6 Merge "DO NOT MERGE: AVRCP: Check the number of text value attributes requested" into mnc-dev by TreeHugger Robot · 8 years ago
  36. 61e561d BNEP: Check received frame type by Myles Watson · 8 years ago
  37. 7cfaf87 Merge "PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback" into mnc-dev by TreeHugger Robot · 8 years ago
  38. cc798ea Merge "DO NOT MERGE Remove memory reference to invalid mem in error log" into mnc-dev by TreeHugger Robot · 8 years ago
  39. 88beb38 SDP: Pass the bounds to process_service_*_rsp by Myles Watson · 8 years ago
  40. a8ff361 Merge "DO NOT MERGE Fix unexpected behavior in reading BNEP packets" into mnc-dev by Hansong Zhang · 8 years ago
  41. 8148eb6 DO NOT MERGE Fix unexpected behavior in reading BNEP packets by Hansong Zhang · 8 years ago
  42. 0d96b5c DO NOT MERGE Remove memory reference to invalid mem in error log by Stanley Tng · 8 years ago
  43. f033115 PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback by Myles Watson · 8 years ago
  44. a16b153 DO NOT MERGE: AVRCP: Check the number of text value attributes requested by Ajay Panicker · 8 years ago
  45. 0a8f655 DO NOT MERGE: AVRCP: Check the number of text attributes requested by Ajay Panicker · 8 years ago
  46. ed45f06 DO NOT MERGE Fix unexpected behavior in SDP by Hansong Zhang · 8 years ago
  47. 294cc61 SDP: Bounds check 'id' parameter for free_sdp_slot() by Andre Eisenbach · 8 years ago
  48. fdcad53 Merge "Add missing extension length check while parsing BNEP control packets" into mnc-dev by TreeHugger Robot · 8 years ago
  49. 01f46e0 Add missing extension length check while parsing BNEP control packets by Pavlin Radoslavov · 8 years ago
  50. 8f18afd Free p_pending_data from tBNEP_CONN to avoid potential memory leaks by Pavlin Radoslavov · 8 years ago
  51. c41ba8a Merge "Add a missing check for PAN buffer size before copying data" into mnc-dev by TreeHugger Robot · 8 years ago
  52. 64d3ed3 Merge "Add missing packet length checks while parsing BNEP control packets" into mnc-dev by TreeHugger Robot · 8 years ago
  53. b5cb610 Merge "Add missing continuation offset check for SDP continuation requests" into mnc-dev by TreeHugger Robot · 8 years ago
  54. d2a3649 Merge "Allocate buffers of the right size when BT_HDR is included" into mnc-dev by TreeHugger Robot · 8 years ago
  55. f31afd3 Add missing packet length checks while parsing BNEP control packets by Pavlin Radoslavov · 8 years ago
  56. 3488364 Add missing continuation offset check for SDP continuation requests by Pavlin Radoslavov · 8 years ago
  57. f7a7f7a Disable PAN Reverse Tethering when connection originated by the Remote by Pavlin Radoslavov · 8 years ago
  58. d1145e0 Add a missing check for PAN buffer size before copying data by Pavlin Radoslavov · 8 years ago
  59. 338e048 Allocate buffers of the right size when BT_HDR is included by Pavlin Radoslavov · 8 years ago
  60. 1bef354 Check LE advertising data length before caching advertising records by Jack He · 8 years ago
  61. 33c68c8 Check the HCI length before extracting the L2CAP length and CID by Pavlin Radoslavov · 9 years ago
  62. 1f433cb DO NOT MERGE Fix potential DoS caused by delivering signal to BT process by Sharvil Nanavati · 9 years ago
  63. 4439d38 Merge "Add guest mode functionality (2/3)" into mnc-dev by Ajay Panicker · 9 years ago
  64. ad31ee0 DO NOT MERGE btif: check overflow on create_pbuf size by Marie Janssen · 9 years ago
  65. 3676e76 Add guest mode functionality (2/3) by Ajay Panicker · 9 years ago
  66. b646eb3 btif: Don't persist remote devices to the config by Marie Janssen · 9 years ago
  67. f0a69c3 DO NOT MERGE Check size of pin before replying by Marie Janssen · 10 years ago
  68. ed01581 DO NOT MERGE Remove Porsche car-kit pairing workaround by Andre Eisenbach · 10 years ago
  69. 05419c8 Fix crashes with lots of discovered LE devices by Marie Janssen · 10 years ago
  70. 74dad51 Disable opening network debug ports for security reasons by Pavlin Radoslavov · 10 years ago
  71. 2492393 LE Multi-Advertising State Change Sub-event Wrong Variable Type by Jacob Lee · 10 years ago
  72. dcfafe9 Fix incorrect SetConnScanParam function mapping by Sunny Kapdi · 10 years ago
  73. b746043 Fix memory corruption of BLE whitelist hashmap by Nitin Arora · 10 years ago
  74. aa41fec Check the return value when reading HCI type byte by Pavlin Radoslavov · 10 years ago
  75. d2199cb Disable remote TCP connections by Pavlin Radoslavov · 10 years ago
  76. 1e1f159 Merge "[DS] BTM_VSC_CHIP_CAPABILITY_M_VERSION doesn't match" into mnc-dev by Iliyan Malchev · 10 years ago
  77. 8d88b1b Allocate large enough buffers when copying AVRC packets by Satya Calloji · 10 years ago
  78. 5aad24f [DS] BTM_VSC_CHIP_CAPABILITY_M_VERSION doesn't match by Jacob Lee · 10 years ago
  79. aa3be1a Implement Bluetooth settings factory reset (3/5) by Ajay Panicker · 10 years ago
  80. d63f7c0 Add Dialog mouse & KB to blacklist for LE secure connections by Nitin Arora · 10 years ago
  81. 84d13ed Add an explicit check for AVRCP vendor data by Pavlin Radoslavov · 10 years ago
  82. caaa00f Fix a crash for a race condition during Bluetooth shutdown by Pavlin Radoslavov · 10 years ago
  83. 9de273d Fix CTS Verifier test for insecure RFCOMM connection. by Sharvil Nanavati · 10 years ago
  84. efa5991 Fix a NULL-pointer crash by Pavlin Radoslavov · 10 years ago
  85. 48a4b9c Assign pseudo address for host-based RPA resolution matches by Andre Eisenbach · 10 years ago
  86. b61d25c Fix memory leak in A2DP event handler by Andre Eisenbach · 10 years ago
  87. 82c8b92 Reset LE encryption key size at LE disconnection only by Nitin Arora · 10 years ago
  88. dab356e Promote AVCTP version to 1.4 by Anubhav Gupta · 10 years ago
  89. 2ac9ae0 Fix a bug allocating buffers for fragmented AVRC packets by Anubhav Gupta · 10 years ago
  90. 1500b8d Fix for uhid_event size check by Amirhossein Simjour · 10 years ago
  91. 760aa99 Unpair HID device cleanup by Casper Bonde · 11 years ago
  92. c613742 Fix the logic for stopping the Power Management timers. by Pavlin Radoslavov · 10 years ago
  93. 196413f Fix TX queue overflow detection by Andre Eisenbach · 10 years ago
  94. 1076b7b Customize Bluetooth sniff interval by Pavlin Radoslavov · 10 years ago
  95. 197ee68 Fix a crash for a race condition during Bluetooth shutdown by Pavlin Radoslavov · 10 years ago
  96. ac72840 Update device type correctly in the NVRAM at inquiry result by Nitin Arora · 10 years ago
  97. 1da48a3 Use pseudo address while re-pairing peripheral by Nitin Arora · 10 years ago
  98. b4365c5 Adding transport type while initiating remote discovery by Nitin Arora · 10 years ago
  99. 280368c Fix potential crash when transcoding legacy config files by Andre Eisenbach · 10 years ago
  100. ccd37fa Enable enhanced connection complete event by Nitin Arora · 10 years ago