OSDN Git Service
Ugo Yu [Thu, 1 Nov 2018 18:17:46 +0000 (11:17 -0700)]
[automerger skipped] DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data
am:
f349ff0c65 -s ours
Change-Id: I5413adf2ceaedc9c397c743d9758cf49cdcc49fa
Ugo Yu [Mon, 29 Oct 2018 16:47:04 +0000 (00:47 +0800)]
DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data
Bug:
111450156
Change-Id: Id23eeedcb7bde5866cd53a2f7f1c30f27c5352f6
(cherry picked from commit
b0125caafec2183d73fc899ce5a8aee43a6e54af)
Ugo Yu [Mon, 29 Oct 2018 16:47:04 +0000 (00:47 +0800)]
Fix possible OOB when AVDT data channel recive ACL data
Bug:
111450156
Change-Id: Id23eeedcb7bde5866cd53a2f7f1c30f27c5352f6
Stanley Tng [Wed, 17 Oct 2018 22:12:58 +0000 (15:12 -0700)]
Fix Spurious Hearing Aid Start and Stop Cmds
Prevent the spurious Start and Stop Commands that are send to the
Hearing Aids when there is audio suspend and resume, and also connection
and disconnections.
Also, make sure that the callback for the Audio Suspend and Resume are
done in the main thread; previously, it was running in the wrong socket
thread.
Lastly, make sure that the Connection Update callback are processed
correctly; previously, we are not checking that the right connection
interval are set and taking the callbacks done by service discovery.
Test: Manual testing with Hearing Aids
Bug:
117619792
Change-Id: I33a175947b0118f0234ec6338c20ac6e7963a598
Merged-In: Ib448992fc0ba5af82c2d117dd65f1abd45d2acb6
Stanley Tng [Thu, 11 Oct 2018 01:57:29 +0000 (18:57 -0700)]
Add more Hearing Aid Profile logs
Add more logs to debug the TimeCheck timeout crash issues.
Bug:
117349352
Test: Manual run
Change-Id: I3a05ca975e41ab002e466150f3f3f28ba0f037df
(cherry picked from commit
05cc6c7e97ecebd3e031f09e74f730641423ae13)
Merged-In: I3a05ca975e41ab002e466150f3f3f28ba0f037df
Hansong Zhang [Thu, 11 Oct 2018 01:02:49 +0000 (18:02 -0700)]
Hearing Aid: Use valid COC service id
Test: disconnect hearing aid and let remote device connect to it
Bug:
116317072
Bug:
117423102
Change-Id: Iea001d287256f4d7d9e8213ac8a4f03d78f4bbc5
Merged-In: Iea001d287256f4d7d9e8213ac8a4f03d78f4bbc5
(cherry picked from commit
0df1bffc0b4e7ae0bd855684d91492168ab2c410)
Jakub Pawlowski [Fri, 12 Oct 2018 08:30:27 +0000 (01:30 -0700)]
[automerger skipped] [automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21 am:
ea12ddddf5 skipped:
3d2f54aa0f am:
572fa878ff -s ours am:
2a054eb8de -s ours
am:
2667debc95 -s ours
Change-Id: I78fb3c7fdf977297fda451bc8791c8cd007ba176
Jakub Pawlowski [Fri, 12 Oct 2018 08:24:22 +0000 (01:24 -0700)]
[automerger skipped] [automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21 am:
ea12ddddf5 skipped:
3d2f54aa0f am:
572fa878ff -s ours
am:
2a054eb8de -s ours
Change-Id: If61dd897dcebc9f941b8e47dc4880bc9711762e6
Jakub Pawlowski [Fri, 12 Oct 2018 08:17:07 +0000 (01:17 -0700)]
[automerger skipped] [automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21 am:
ea12ddddf5 skipped:
3d2f54aa0f
am:
572fa878ff -s ours
Change-Id: I85ef6f11735b1648f844a7abf46ff8606f829869
Jakub Pawlowski [Fri, 12 Oct 2018 06:49:13 +0000 (23:49 -0700)]
Fix possible OOB read am:
6e6c347e79 am:
bd361ff770
am:
58a0027263
Change-Id: Ib2a9a31a684e09954699253b4e5ef23fe4a171f7
Jakub Pawlowski [Fri, 12 Oct 2018 06:46:03 +0000 (23:46 -0700)]
Fix possible OOB read am:
6e6c347e79
am:
bd361ff770
Change-Id: I83f0e68dbd0f6f1a521215d6b2543c23734f486f
Jakub Pawlowski [Fri, 12 Oct 2018 06:36:49 +0000 (23:36 -0700)]
Fix possible OOB read
am:
6e6c347e79
Change-Id: I9fd741af3e611ace9b3d063670751e49852d007f
Android Build Merger (Role) [Fri, 12 Oct 2018 06:34:07 +0000 (06:34 +0000)]
[automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21 am:
ea12ddddf5 skipped:
3d2f54aa0f
Change-Id: I694383e8c553b788926656c2ae03e8a3ca37b0ea
Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:37 +0000 (22:20 +0000)]
[automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21 am:
ea12ddddf5
Change-Id: I70abf72ca237a386e3712dacae00329929efd22a
Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:35 +0000 (22:20 +0000)]
[automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea am:
dd2fbd1c21
Change-Id: Ide25784c8161e3bf8e8bf19de71e810006a4ffd3
Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:32 +0000 (22:20 +0000)]
[automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff am:
8c06d18eea
Change-Id: I489c10b25faf0f1a0725e29b9f2bd7c1d17389e2
Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:29 +0000 (22:20 +0000)]
[automerger] Fix possible OOB read in process_service_search_rsp am:
b6fa6e4fff
Change-Id: Id18234fccee442ea5f2ff7ad9bcf193dd50226b3
Jakub Pawlowski [Wed, 10 Oct 2018 18:07:12 +0000 (20:07 +0200)]
Fix possible OOB read in process_service_search_rsp
Bug:
74249842
Change-Id: I0dbe43f0da1f5a8f14bcb69659752de4bd70ca98
Merged-In: I0dbe43f0da1f5a8f14bcb69659752de4bd70ca98
Jakub Pawlowski [Wed, 10 Oct 2018 17:35:37 +0000 (19:35 +0200)]
Fix possible OOB read
Bug:
74249842
Change-Id: I0dbe43f0da1f5a8f14bcb69659752de4bd70ca98
weichinweng [Wed, 3 Oct 2018 07:08:54 +0000 (15:08 +0800)]
Stop A2DP stream when shutting down A2DP source.
When shutting down a2dp source,
A2DP source set StateShuttingDown state too fast cause the A2DP doesn’t stop stream.
Will try to stop A2DP when doing A2DP source end session.
Bug:
116317072
Bug:
112279820
Test: Build Pass, BT off/on when play A2DP
Change-Id: I6bfb5c235da1ff4a7e6814bae3a98ae7dd1788aa
(cherry picked from commit
cdcdca546f533b55a697abd4cedafec14fb2ff6a)
Stanley Tng [Tue, 25 Sep 2018 18:15:24 +0000 (11:15 -0700)]
Hearing Aid: use correct Data Length and MediaType
Adjusted the requested data length to the BT Controller from 168 to 167.
Also, change the default media type during playback to unknown.
Bug:
116317072
Bug:
116631303
Test: Manual testing with Hearing Aids and verifying with OTA logs
Change-Id: Ic4e934729a98bef5c10ebca64093d8a192e79a01
(cherry picked from commit
51a9bba7098fea697cc3785a4d32625d35403f1d)
TreeHugger Robot [Fri, 5 Oct 2018 18:02:40 +0000 (18:02 +0000)]
Merge "HIDD: Check descriptor length and increase buffer" into pi-dev
Hansong Zhang [Tue, 2 Oct 2018 23:26:38 +0000 (16:26 -0700)]
HIDD: Check descriptor length and increase buffer
Since maximum descriptor length is 2048, we need to assign 2054 bytes of
buffer for another 6 bytes of data. Also added a const for maximum
descriptor length.
Bug:
113572366
Test: manual
Change-Id: Ie2b25c9e1a9f2019cbc7e6fbecbb08b643c87946
Merged-In: Ie2b25c9e1a9f2019cbc7e6fbecbb08b643c87946
Pavlin Radoslavov [Sat, 25 Aug 2018 01:45:16 +0000 (18:45 -0700)]
Run the wakelock JNI callbacks on the JNI thread
All JNI callbacks must be on the JNI thread, otherwise this could
impact the threads' operation.
Bug:
111277984
Test: A2DP streaming
Change-Id: I94fa4500aea62a574c80749e904434e46eb4e942
(cherry picked from commit
c788ad703836f6ac0f63e47b20f27b41dcce9353)
Hansong Zhang [Mon, 24 Sep 2018 22:03:09 +0000 (15:03 -0700)]
DO NOT MERGE Hearing Aid: Add JNI API for add/remove whitelist
Allow Java layer to add a hearing aid device to white list or remove
from white list
Bug:
116317072
Bug:
115365334
Test: connect to a pair with one device off
Change-Id: Iac5df8f371fb39fade4493d2da8226f026545fb3
Hansong Zhang [Thu, 27 Sep 2018 05:02:38 +0000 (22:02 -0700)]
Hearing Aid: Clean up GATT on disconnect
When user requests Disconnect(), after disconnecting GATT,
OnGattDisconnected() never cleans up GATT queue, because the
corresponding device is already removed from HearingDevices. We need to
clean up the queue before connecting the same device again. Without the
fix, sometimes ACL is connected, but the host failed to read GATT
characteristic to open COC. Also clean up connection update status
during disconnect
Bug:
116317072
Bug:
115365334
Test: connect to both devices -> disconnect -> connect, and repeat
Change-Id: I158b19b3d1f2cb2123ec554eb1ffe8c842df998e
Jakub Pawlowski [Mon, 24 Sep 2018 14:43:59 +0000 (16:43 +0200)]
Send volume just once when starting the stream.
The volume is in the Start command already, no need to send it in a
separate command.
Bug:
116317072
Bug:
116044083
Bug:
116145308
Test: play music, pause, adjust volume, start playing again, verify
playing was re-started with proper volume level.
Change-Id: I2a900b03a35670de4a265184f333517db17497d8
Merged-In: I76f4b6a9302dd84781195475de50374e9c30700f
Stanley Tng [Wed, 22 Aug 2018 21:43:57 +0000 (14:43 -0700)]
Clear connection update pending flag when disconnected
For the hearing aid profile and when we get disconnection
while there is a pending connection update, then clear the flag so that
the next connection update can proceed.
Bug:
116317072
Bug:
116044083
Bug:
112050972
Test: Manual test to check for regressions
Change-Id: I54635a680cf276cf6c9f94520943c3efa97e77ec
Merged-In: Ib7d281fa6e50e0ee7cf75b552d829e2e8d4134ba
Stanley Tng [Sat, 9 Jun 2018 00:09:00 +0000 (17:09 -0700)]
Hearing Aid: codec and connection interval switching
Added support to switch the LE Connection Interval between 10 msec and
20 msec. Uses the "persist.bluetooth.hearingaid.interval" to configure.
Bug:
116317072
Bug:
116044083
Test: Manually use hearing aid devices and switches between 10 msec and
20 msec connection interval
Bug:
79579786
Change-Id: Iec15a0c9f76afe265368fd90662ffe60a29fb27b
Merged-In: I982002ac9a41969cda5dec73332b27b3142d7426
Jakub Pawlowski [Tue, 10 Apr 2018 07:16:53 +0000 (00:16 -0700)]
Hearing Aid - codec switching
StartSendingAudio internally sets the codec to the HearingAidAudioSource.
OnDeviceAvailable callback triggers audio framework to grab codec
configuration from HearingAidAudioSource. Those calls must be made in proper
order, otherwise audio framework will grab bad codec configuration.
This patch also remove default codec configuration, and crash if codec
configuration is not done correctly.
Bug:
116317072
Bug:
116044083
Test: use hearing aid supporting 24kHz codec
Change-Id: I9419d58fa8728fc8e0f0c2d2ed8d8d741309a9a3
Merged-In: I9419d58fa8728fc8e0f0c2d2ed8d8d741309a9a3
Merged-In: I8ce09c709a9cb4e79413a99fc344dffe824bc707
TreeHugger Robot [Wed, 26 Sep 2018 00:45:04 +0000 (00:45 +0000)]
Merge "bta: Pass the correct UUID array size in bta_ag_do_disc" into pi-dev
Ugo Yu [Tue, 25 Sep 2018 04:26:29 +0000 (21:26 -0700)]
[automerger skipped] Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-dev am:
bc5bd697c9 -s ours am:
77175af80b -s ours
am:
8be1e6fac4 -s ours
Change-Id: Ic52691d8f86bce01ca6e0b42e512082cb20566d8
Ugo Yu [Tue, 25 Sep 2018 04:21:39 +0000 (21:21 -0700)]
[automerger skipped] Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-dev am:
bc5bd697c9 -s ours
am:
77175af80b -s ours
Change-Id: Ic285392e964bd2f5d20f9d38bd79725512d4ea27
Ugo Yu [Tue, 25 Sep 2018 04:10:21 +0000 (21:10 -0700)]
[automerger skipped] Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-dev
am:
bc5bd697c9 -s ours
Change-Id: I35806d7afb20585bd339bfc333769cd76559f862
TreeHugger Robot [Tue, 25 Sep 2018 03:52:21 +0000 (03:52 +0000)]
Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-dev
Ugo Yu [Sat, 22 Sep 2018 01:46:51 +0000 (18:46 -0700)]
[automerger skipped] Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-mr1-dev
am:
3298d1457d -s ours
Change-Id: Ib30226371223485479de44ac15466a4a048f9966
TreeHugger Robot [Sat, 22 Sep 2018 01:35:20 +0000 (01:35 +0000)]
Merge "DO NOT MERGE - Check SDU lower bound before allocate p_data" into oc-mr1-dev
TreeHugger Robot [Sat, 22 Sep 2018 01:00:32 +0000 (01:00 +0000)]
Merge "Check SDU lower bound before allocate p_data" into pi-dev
Ugo Yu [Fri, 21 Sep 2018 21:00:46 +0000 (14:00 -0700)]
[automerger skipped] [automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760 am:
90248f8fb3 skipped:
b3bef4683a am:
c5baf9ac24 am:
9bcb338d3d
am:
247c18200e -s ours
Change-Id: I55bc0845e682b7cf381bcd68e471c34e839bea2e
Ugo Yu [Fri, 21 Sep 2018 20:54:48 +0000 (13:54 -0700)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760 am:
90248f8fb3 skipped:
b3bef4683a am:
c5baf9ac24
am:
9bcb338d3d
Change-Id: I99df5a715a420c7b797996b7235277cb8901585a
Ugo Yu [Fri, 21 Sep 2018 20:47:18 +0000 (13:47 -0700)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760 am:
90248f8fb3 skipped:
b3bef4683a
am:
c5baf9ac24
Change-Id: Ifc64ce2a02192aa306e8716ce24098abc1d75b42
Ugo Yu [Mon, 17 Sep 2018 07:59:30 +0000 (15:59 +0800)]
DO NOT MERGE - Check SDU lower bound before allocate p_data
Bug:
112321180
Test: SL4A BleCocTest:test_coc_insecured_connection_write_ascii
Change-Id: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d
Merged-In: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d
Ugo Yu [Mon, 17 Sep 2018 07:59:30 +0000 (15:59 +0800)]
DO NOT MERGE - Check SDU lower bound before allocate p_data
Bug:
112321180
Test: SL4A BleCocTest:test_coc_insecured_connection_write_ascii
Change-Id: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d
Android Build Merger (Role) [Tue, 18 Sep 2018 12:50:00 +0000 (12:50 +0000)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760 am:
90248f8fb3 skipped:
b3bef4683a
Change-Id: I839953933568edcea6c43f0e0b772ae07fb7244a
Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:56 +0000 (12:49 +0000)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760 am:
90248f8fb3
Change-Id: I99e2abfb378fbfba47ff55cfeb6b825b825088e8
Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:52 +0000 (12:49 +0000)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4 am:
e51a7b9760
Change-Id: I13a2cd3d213f204feb8a7dcf0430aa5a729efddd
Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:49 +0000 (12:49 +0000)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8 am:
8e31e9abb4
Change-Id: Icfc1e9961a59325a522ab4385411efe446b19ce1
Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:46 +0000 (12:49 +0000)]
[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am:
87bcda81b8
Change-Id: I51d65f4d9ddba01e86ee88b600e820af4f431415
Ugo Yu [Tue, 18 Sep 2018 12:49:22 +0000 (20:49 +0800)]
DO NOT MERGE - Check SDU lower bound before allocate p_data
Bug:
112321180
Test: SL4A BleCocTest:test_coc_insecured_connection_write_ascii
Change-Id: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d
Ugo Yu [Mon, 17 Sep 2018 07:59:30 +0000 (15:59 +0800)]
Check SDU lower bound before allocate p_data
Bug:
112321180
Test: SL4A BleCocTest:test_coc_insecured_connection_write_ascii
Change-Id: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d
Pavlin Radoslavov [Fri, 7 Sep 2018 16:34:53 +0000 (09:34 -0700)]
Merge "Check data length when parsing AVRCP vendor specific command responses" into oc-dev am:
03e6de3be8 am:
36e56d4b33
am:
e03c093530
Change-Id: I1667ad997ed993e8de3985d0f001e75ac80cb30f
Pavlin Radoslavov [Fri, 7 Sep 2018 16:34:29 +0000 (09:34 -0700)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into oc-dev am:
a57a887b16 am:
0c13a140c9
am:
8dd01ede32
Change-Id: Id45560be71798fcb6b7a0b77987cf12e1f06d46c
Pavlin Radoslavov [Fri, 7 Sep 2018 16:33:50 +0000 (09:33 -0700)]
Merge changes from topic "bt-security-avrc_ctrl_pars_vendor_rsp-length-check-nyc-dev" into oc-dev am:
5e20d5088c am:
afc8839cea
am:
9b86fdb58e
Change-Id: Iec2d44e67ab7dbac045199fe0ffa5d5051e7528b
Pavlin Radoslavov [Fri, 7 Sep 2018 16:33:18 +0000 (09:33 -0700)]
[automerger skipped] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
2692408d05 am:
90d9589f1e
am:
746df692f0 -s ours
Change-Id: Iaf0899a8521801655b7e1f6e675d9e809739af06
Pavlin Radoslavov [Fri, 7 Sep 2018 16:29:33 +0000 (09:29 -0700)]
Merge "Check data length when parsing AVRCP vendor specific command responses" into oc-dev am:
03e6de3be8
am:
36e56d4b33
Change-Id: I307f9c5197f80086593eb6dad1bdf55ec9100bab
Pavlin Radoslavov [Fri, 7 Sep 2018 16:29:13 +0000 (09:29 -0700)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into oc-dev am:
a57a887b16
am:
0c13a140c9
Change-Id: I8a8547ae34543d7055024e6c1719feaf70bab891
Pavlin Radoslavov [Fri, 7 Sep 2018 16:28:48 +0000 (09:28 -0700)]
Merge changes from topic "bt-security-avrc_ctrl_pars_vendor_rsp-length-check-nyc-dev" into oc-dev am:
5e20d5088c
am:
afc8839cea
Change-Id: I4e91709896dcb3dd45f0565048a8c51e37e75b9b
Pavlin Radoslavov [Fri, 7 Sep 2018 16:28:22 +0000 (09:28 -0700)]
DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
2692408d05
am:
90d9589f1e
Change-Id: I22b0622f5496f5ee8e3de7d95734e0112ba6913f
Pavlin Radoslavov [Fri, 7 Sep 2018 16:26:52 +0000 (09:26 -0700)]
Merge "Check data length when parsing AVRCP vendor specific command responses" into oc-dev
am:
03e6de3be8
Change-Id: I7de02b38797b24f1daf834be934c727d442dfbe0
Pavlin Radoslavov [Fri, 7 Sep 2018 16:26:33 +0000 (09:26 -0700)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into oc-dev
am:
a57a887b16
Change-Id: I256e6f92404d6abcb3747728f119936750303ea6
Pavlin Radoslavov [Fri, 7 Sep 2018 16:25:50 +0000 (09:25 -0700)]
Merge changes from topic "bt-security-avrc_ctrl_pars_vendor_rsp-length-check-nyc-dev" into oc-dev
am:
5e20d5088c
Change-Id: Idfef0788a3a29602adbbe0e6cedf07868794e561
Pavlin Radoslavov [Fri, 7 Sep 2018 16:25:17 +0000 (09:25 -0700)]
DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()
am:
2692408d05
Change-Id: I8c19a5d6eb81e758430707f203c1d75e46f8d064
TreeHugger Robot [Fri, 7 Sep 2018 16:16:26 +0000 (16:16 +0000)]
Merge "Check data length when parsing AVRCP vendor specific command responses" into oc-dev
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into nyc-mr2-dev
* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f am:
81bfd4b649
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into cw-f-dev
* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into nyc-mr1-dev
* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into nyc-dr1-dev
* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge "DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses" into nyc-dev
TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]
Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into oc-dev
* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f am:
81bfd4b649 skipped:
06c4724c91
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f am:
81bfd4b649
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
TreeHugger Robot [Fri, 7 Sep 2018 16:15:19 +0000 (16:15 +0000)]
Merge changes from topic "bt-security-avrc_ctrl_pars_vendor_rsp-length-check-nyc-dev" into oc-dev
* changes:
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683 am:
38a6087b6a skipped:
df71e4a376
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683 am:
38a6087b6a
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf
DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()
Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:55 +0000 (04:59 +0000)]
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683 am:
38a6087b6a skipped:
df71e4a376
Change-Id: Ibe7f4bec37e68cf06ba39d0c8cce02ec7ba6fb18
Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:53 +0000 (04:59 +0000)]
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683 am:
38a6087b6a
Change-Id: I4663734017282372f8d93cb498b80098de609c72
Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:51 +0000 (04:59 +0000)]
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1 am:
eb2615a683
Change-Id: I99e38ee8048be6b98e0732fb32bffba78a81ae32
Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:49 +0000 (04:59 +0000)]
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf am:
c0e2026eb1
Change-Id: I06ca49edef4db3a930150ba7a6b875d6727ae50d
Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:47 +0000 (04:59 +0000)]
[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am:
b4cf8416bf
Change-Id: I74cd9a6ffa3096d58b11092095b82f69fc94a3b7
Pavlin Radoslavov [Thu, 6 Sep 2018 22:41:27 +0000 (15:41 -0700)]
DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()
Bug:
111450417
Test: PoC test program
Change-Id: Idd619e52dc7a2944d0d08af824505580e299c163
(cherry picked from commit
2692408d05bf16738284b61833649cee5d2a2233)
Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:38 +0000 (00:42 +0000)]
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f am:
81bfd4b649 skipped:
06c4724c91
Change-Id: I4d5ede0ba21700c7d2cfe7e35131bf3932d42ca9
Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:36 +0000 (00:42 +0000)]
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f am:
81bfd4b649
Change-Id: I1fd09d0eefdffd0670f217aaf2a674abc7bc829a
Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:34 +0000 (00:42 +0000)]
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f am:
33b88d2e2f
Change-Id: I5848daa571ae75f229b02b4856bd9c0ae8bc809a
Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:32 +0000 (00:42 +0000)]
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2 am:
1f7ced7d2f
Change-Id: Ia57b0cdffd9d0db790e002679342611c036b5788
Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:31 +0000 (00:42 +0000)]
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am:
8148397ca2
Change-Id: I986e2bb8acf0330ef5e8caa37180a5884725c2e6
Pavlin Radoslavov [Thu, 6 Sep 2018 01:21:31 +0000 (18:21 -0700)]
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses
Bug:
111450531
Bug:
111896861
Test: PoC test program
Change-Id: I564bee8f05efabc29383659a75e695b4da76c6aa
(cherry picked from commit
7439ea940354f65a147c4ecfce3bada49c688047)
Pavlin Radoslavov [Thu, 6 Sep 2018 22:41:27 +0000 (15:41 -0700)]
DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()
Bug:
111450417
Test: PoC test program
Change-Id: Idd619e52dc7a2944d0d08af824505580e299c163
Pavlin Radoslavov [Thu, 6 Sep 2018 22:41:27 +0000 (15:41 -0700)]
Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()
Bug:
111450417
Test: PoC test program
Change-Id: Idd619e52dc7a2944d0d08af824505580e299c163
(cherry picked from commit
1c14e10cac53d5a5724dcf34c5679ad8819f9442)
TreeHugger Robot [Thu, 6 Sep 2018 23:22:29 +0000 (23:22 +0000)]
Merge "HID Device: Fix OOB in register_app" into pi-dev
Myles Watson [Thu, 6 Sep 2018 17:57:47 +0000 (10:57 -0700)]
bta: Pass the correct UUID array size in bta_ag_do_disc
Bug:
113164621
Test: Connect HSP from a device to the phone
Change-Id: Iec875cd165ad1cea64c307602bb00b623967c7c7
Hansong Zhang [Wed, 5 Sep 2018 23:39:16 +0000 (16:39 -0700)]
HID Device: Fix OOB in register_app
Bug:
113037220
Bug:
113111784
Test: manual
Change-Id: I91bcd5032959458b926c479160c7e391b8de313b
Pavlin Radoslavov [Thu, 6 Sep 2018 01:21:31 +0000 (18:21 -0700)]
Check data length when parsing AVRCP vendor specific command responses
Bug:
111450531
Bug:
111896861
Test: PoC test program
Change-Id: I564bee8f05efabc29383659a75e695b4da76c6aa
Ted [Fri, 17 Aug 2018 10:49:37 +0000 (18:49 +0800)]
Fix "Disable Absolute Volume" Bluetooth develop option work
Do not report device support absolute volume while
"Disable Absolute Volume" in developer option is enabled or
the remote device is listed in the interoperability database.
Test: manually adjust volume when Disable Absolute Volume is enabled
Bug:
112193362
Change-Id: Id63a22dba0d8a871035774fc86b66d32e9225b48
Merged-In: Id63a22dba0d8a871035774fc86b66d32e9225b48
Ugo Yu [Mon, 13 Aug 2018 02:12:40 +0000 (10:12 +0800)]
Fix wrong UUID mask when doing BLE filter scan
bug:
112350218
Test: manual
Change-Id: I9e4297b936e7a7db164e7ff3bf680c43600c5bda
(cherry picked from commit
04433372392a3c50558cb96f076757472dac2cec)
Cheney Ni [Sat, 11 Aug 2018 00:56:16 +0000 (17:56 -0700)]
Merge "Add packet length checks in mca_ccb_hdl_req" into oc-dev am:
816107b1e3 am:
57cde1b147
am:
c019726c62
Change-Id: Ie0d10696cff7d8da694c96af8b224fe4d9061383
Cheney Ni [Sat, 11 Aug 2018 00:55:49 +0000 (17:55 -0700)]
[automerger skipped] Merge changes from topic "am-
dcf0c368-3f3f-440a-998e-
f94bd1924189" into oc-dev am:
1718736f85 -s ours am:
3d14101b52 -s ours
am:
02482e1edd -s ours
Change-Id: I69d112ec62826799d275e32cf5499083e84d13fe
Cheney Ni [Sat, 11 Aug 2018 00:27:54 +0000 (17:27 -0700)]
Merge "Add packet length checks in mca_ccb_hdl_req" into oc-dev am:
816107b1e3
am:
57cde1b147
Change-Id: I05d1d2af205963afcd1c6bf77c8ca097662e0fc8
Cheney Ni [Sat, 11 Aug 2018 00:27:34 +0000 (17:27 -0700)]
[automerger skipped] Merge changes from topic "am-
dcf0c368-3f3f-440a-998e-
f94bd1924189" into oc-dev am:
1718736f85 -s ours
am:
3d14101b52 -s ours
Change-Id: Iceb020184e799318eb665e19544c1c8012f2b9f9
Cheney Ni [Sat, 11 Aug 2018 00:11:43 +0000 (17:11 -0700)]
Merge "Add packet length checks in mca_ccb_hdl_req" into oc-dev
am:
816107b1e3
Change-Id: Ic37e076a0e89dc449071b6e715c1ba13034b48e8
Cheney Ni [Sat, 11 Aug 2018 00:11:22 +0000 (17:11 -0700)]
[automerger skipped] Merge changes from topic "am-
dcf0c368-3f3f-440a-998e-
f94bd1924189" into oc-dev
am:
1718736f85 -s ours
Change-Id: Id71e8b3945f0d2051c2b642c6ed83c293f5d31fb
TreeHugger Robot [Fri, 10 Aug 2018 23:29:21 +0000 (23:29 +0000)]
Merge "Add packet length checks in mca_ccb_hdl_req" into oc-dev
Cheney Ni [Fri, 10 Aug 2018 23:16:31 +0000 (16:16 -0700)]
[automerger skipped] Merge "Checks the SMP length to fix OOB read" into oc-dev am:
a0f6200e5f am:
a2d1977617
am:
4b3d08fa40 -s ours
Change-Id: I28d07e232999bdda412c4263bd23e78aff2c27d5
TreeHugger Robot [Fri, 10 Aug 2018 23:13:53 +0000 (23:13 +0000)]
Merge changes from topic "am-
dcf0c368-3f3f-440a-998e-
f94bd1924189" into nyc-mr2-dev
* changes:
[automerger] Checks the SMP length to fix OOB read am:
353faee793 am:
9343dda4d3 am:
4df8c20808 am:
4bf5cf2228
[automerger] Checks the SMP length to fix OOB read am:
353faee793 am:
9343dda4d3 am:
4df8c20808
[automerger] Checks the SMP length to fix OOB read am:
353faee793 am:
9343dda4d3
[automerger] Checks the SMP length to fix OOB read am:
353faee793
Checks the SMP length to fix OOB read
TreeHugger Robot [Fri, 10 Aug 2018 23:13:53 +0000 (23:13 +0000)]
Merge changes from topic "am-
dcf0c368-3f3f-440a-998e-
f94bd1924189" into cw-f-dev
* changes:
[automerger] Checks the SMP length to fix OOB read am:
353faee793 am:
9343dda4d3 am:
4df8c20808
[automerger] Checks the SMP length to fix OOB read am:
353faee793 am:
9343dda4d3
[automerger] Checks the SMP length to fix OOB read am:
353faee793
Checks the SMP length to fix OOB read
OSDN Git Service
