OSDN Git Service

Merge cherrypicks of [5745882, 5746123, 5746124, 5746125, 5745544, 5745819, 5746700...
[android-x86/system-bt.git] / stack /
2018-12-07 android-build-team... Merge cherrypicks of [5745882, 5746123, 5746124, 574612...
2018-12-07 Ugo YuAdd OOB check in avrc_pars_browse_rsp
2018-12-07 Jakub PawlowskiFix buffer overflow in btif_dm_data_copy
2018-11-26 android-build-team... Merge cherrypicks of [5610460, 5610582, 5610249, 561025...
2018-11-26 Myles WatsonDO NOT MERGE: SDP: Check p_end in save_attr_seq and...
2018-11-26 Myles WatsonDO NOT MERGE: MCAP: Check response length in mca_ccb_hd...
2018-11-26 Ugo YuDO NOT MERGE: Fix possible OOB when AVDT data channel...
2018-10-19 android-build-team... Merge cherrypicks of [5313290, 5313323, 5313343, 531341...
2018-10-19 Jakub PawlowskiFix possible OOB read
2018-10-19 Ugo YuDO NOT MERGE - Check SDU lower bound before allocate...
2018-09-11 android-build-team... Merge cherrypicks of [4995494, 4995495, 4995496, 499549...
2018-09-11 Pavlin RadoslavovCheck data length when parsing AVRCP vendor specific...
2018-09-11 Pavlin RadoslavovDO NOT MERGE - Check AVRCP data length when parsing...
2018-08-30 android-build-team... Merge cherrypicks of [4897833, 4897834, 4897835] into...
2018-08-30 Hansong ZhangFix a wrong check in rfc_parse_data
2018-08-30 Hansong ZhangAdd bound check for rfc_parse_data
2018-08-16 android-build-team... Merge cherrypicks of [4793902] into oc-m8-release
2018-08-16 Hansong ZhangFix build failure in stack/rfcomm/rfc_ts_frames.c
2018-08-16 android-build-team... Merge cherrypicks of [4787660, 4787680, 4787071, 478770...
2018-08-16 Cheney NiAdd packet length checks in mca_ccb_hdl_req
2018-08-16 Cheney NiChecks the SMP length to fix OOB read
2018-08-16 Ugo YuAdd packet length check in smp_proc_master_id
2018-08-16 Pavlin RadoslavovAdd missing AVRCP message length checks inside avrc_msg...
2018-08-16 Ugo YuDO NOT MERGE Fix OOB read before buffer length check
2018-08-16 Hansong ZhangFix OOB read in avrc_ctrl_pars_vendor_rsp
2018-08-16 Hansong ZhangCheck remaining frame length in rfc_process_mx_message
2018-08-16 Jakub PawlowskiFix copy length calculation in sdp_copy_raw_data
2018-08-03 android-build-team... Merge cherrypicks of [4691111, 4689862, 4690575, 469057...
2018-08-03 Hansong ZhangHID Host: Check L2CAP packet data length
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Jakub PawlowskiAdd packet length checks in l2cble_process_sig_cmd
2018-08-03 Jakub PawlowskiDon't use Address after it was deleted
2018-08-03 Jakub PawlowskiSDP: return error on offset bigger than atribute length
2018-08-03 Ajay PanickerDO NOT MERGE: Don't reuse buffer when building response
2018-08-03 Pavlin RadoslavovAdd BT_HDR length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd packet length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd checks whether the AVDTP element data length is...
2018-08-03 Jack HeBNEP: Fix OOB access in bnep_data_ind
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth causing remote...
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth bugs causing...
2018-08-03 Myles WatsonDO NOT MERGE: SDP: Recalculate param_len after max_list_len
2018-08-03 Jakub PawlowskiDecrease length after reading from array in process_ser...
2018-08-03 Hansong ZhangDO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach...
2018-08-03 Jakub PawlowskiGATT: Handle too short Error Response PDU
2018-08-03 Jakub PawlowskiAdd PDU size checks in process_service_search_attr_rsp
2018-08-03 Ajay PanickerAdd bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI...
2018-08-03 Hansong ZhangDO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET...
2018-08-03 Jakub PawlowskiGet rid of BTM_IS_PUBLIC_BDA
2018-08-03 Andre EisenbachDO NOT MERGE SMP: Validate remote elliptic curve points
2018-08-03 Hansong ZhangDO NOT MERGE Add bounds check for BNEP_Write
2018-08-03 Hansong ZhangDO NOT MERGE Initialize local variable in gatts_process...
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Myles WatsonPAN: Always allocate in bta_pan_data_buf_ind_cback
2018-08-03 Stanley TngDO NOT MERGE Handle bad packet length in gatts_process_...
2018-08-03 Stanley TngDO NOT MERGE Drop LE CoC fragments when frame size...
2018-08-03 Hansong ZhangDO NOT MERGE Fix unexpected behavior in smp_sm_event
2018-03-15 android-build-team... Snap for 4603989 from cf98916401833f40c3aa5bf42dee57715...
2018-02-26 android-build-team... Merge cherrypicks of [3661626, 3661980, 3662429, 366154...
2018-02-26 Ajay PanickerAVRCP: Check number of text attribute values in response
2018-02-26 Ajay PanickerAVRCP: Set maximum string length when copying to buffer
2018-02-26 Ajay PanickerAVRCP: Initialize buffer for attribute values to be...
2018-02-26 Ajay PanickerAVRCP: Check number of text attributes in response
2018-02-26 Ajay PanickerAVRCP: Check the number of text value attributes requested
2018-02-26 Myles WatsonSDP: Check p_req_end before reading from p_req
2018-02-26 android-build-team... Snap for 4565141 from 83c8be063854a84843042a2089f63e777...
2018-02-14 android-build-team... Merge cherrypicks of [3614756, 3614757, 3614861, 361475...
2018-02-14 Ajay PanickerAVRCP: Check number of text attribute values in response
2018-02-14 Ajay PanickerAVRCP: Set maximum string length when copying to buffer
2018-02-14 Ajay PanickerAVRCP: Initialize buffer for attribute values to be...
2018-02-14 Ajay PanickerAVRCP: Check number of text attributes in response
2018-02-14 Ajay PanickerAVRCP: Check the number of text value attributes requested
2018-02-08 android-build-team... Merge cherrypicks of [3581037, 3581038, 3580473, 358062...
2018-02-08 Myles WatsonSDP: Check p_req_end before reading from p_req
2018-01-18 android-build-team... Merge cherrypicks of [3478238, 3478653, 3478239, 347858...
2018-01-18 Myles WatsonSDP: Include the offset in sdp_disc_server_rsp
2018-01-18 Ajay PanickerAVRCP: Check the number of text attributes requested
2018-01-18 Stanley TngRemove memory reference to invalid mem in error log
2018-01-18 Myles WatsonBNEP: Check received frame type
2018-01-18 Myles WatsonPAN: Fix Use-after-free in bta_pan_data_buf_ind_cback
2018-01-18 Hansong ZhangFix unexpected behavior in reading BNEP packets
2018-01-18 Hansong ZhangFix unexpected behavior in SDP
2018-01-18 Pavlin RadoslavovAllocate/free the SDP connection timers only during...
2018-01-18 Myles WatsonSDP: Pass the bounds to process_service_*_rsp
2018-01-18 android-build-team... Merge cherrypicks of [3478311, 3478390, 3478133, 347817...
2018-01-18 Myles WatsonSDP: Include the offset in sdp_disc_server_rsp
2018-01-18 Ajay PanickerAVRCP: Check the number of text attributes requested
2018-01-18 Stanley TngRemove memory reference to invalid mem in error log
2018-01-18 Myles WatsonBNEP: Check received frame type
2018-01-18 Myles WatsonPAN: Fix Use-after-free in bta_pan_data_buf_ind_cback
2018-01-18 Hansong ZhangFix unexpected behavior in reading BNEP packets
2018-01-18 Hansong ZhangFix unexpected behavior in SDP
2018-01-18 Pavlin RadoslavovAllocate/free the SDP connection timers only during...
2018-01-18 Myles WatsonSDP: Pass the bounds to process_service_*_rsp
2017-10-18 android-build-team... Snap for 4402310 from ff6208c4121dd6f14da465e3f5f4e0c30...
2017-10-15 android-build-team... Snap for 4396223 from aad2686274783a229c8642db5fec4727c...
2017-10-13 Jakub PawlowskiFix crash in l2cble_start_conn_update
2017-10-12 Scott BauerRead the correct amount of attributes am: 4d1470eb54...
2017-10-12 Scott BauerRead the correct amount of attributes am: 636b754cfa...
2017-10-12 Scott BauerRead the correct amount of attributes am: 8eb6493ad5...
2017-10-12 Scott BauerRead the correct amount of attributes am: 4d1470eb54...
next