OSDN Git Service

android-x86/system-bt.git
6 years ago[automerger skipped] Merge "Don't use Address after it was deleted" into oc-dev am...
Jakub Pawlowski [Fri, 13 Jul 2018 07:24:40 +0000 (00:24 -0700)]
[automerger skipped] Merge "Don't use Address after it was deleted" into oc-dev am: 28fcaa1b86  -s ours
am: 2d028b47a1  -s ours

Change-Id: I076b32ad9ed9013923817163a33ac492962efef3

6 years ago[automerger skipped] Merge "Don't use Address after it was deleted" into oc-dev
Jakub Pawlowski [Fri, 13 Jul 2018 07:18:38 +0000 (00:18 -0700)]
[automerger skipped] Merge "Don't use Address after it was deleted" into oc-dev
am: 28fcaa1b86  -s ours

Change-Id: I694cbab464170d643cba6f8f6b7ff72e95ca2dd7

6 years ago[automerger skipped] Merge "BLE: Don't access freed buffer in log message" into oc...
Jakub Pawlowski [Fri, 13 Jul 2018 07:03:12 +0000 (00:03 -0700)]
[automerger skipped] Merge "BLE: Don't access freed buffer in log message" into oc-dev am: 7ff736d81e
am: 7a5283878f  -s ours

Change-Id: I3173dfdb3cf7b441ddb65654734de2750b9b59e2

6 years agoMerge "BLE: Don't access freed buffer in log message" into oc-dev
Jakub Pawlowski [Fri, 13 Jul 2018 06:57:45 +0000 (23:57 -0700)]
Merge "BLE: Don't access freed buffer in log message" into oc-dev
am: 7ff736d81e

Change-Id: I024b9dea0a7a6137410910f35e296b8cbec0a17e

6 years agoMerge "Don't use Address after it was deleted" into oc-dev
TreeHugger Robot [Fri, 13 Jul 2018 06:46:34 +0000 (06:46 +0000)]
Merge "Don't use Address after it was deleted" into oc-dev

6 years agoMerge "BLE: Don't access freed buffer in log message" into oc-dev
Jakub Pawlowski [Fri, 13 Jul 2018 06:44:12 +0000 (06:44 +0000)]
Merge "BLE: Don't access freed buffer in log message" into oc-dev

6 years ago[automerger skipped] [automerger] Add packet length checks in l2cble_process_sig_cmd...
Jakub Pawlowski [Fri, 13 Jul 2018 06:08:13 +0000 (23:08 -0700)]
[automerger skipped] [automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182 am: 24255e38b5 am: 5f29768b74 skipped: 1703d7ed24 am: 62d297d230  -s ours
am: a8fef9b05a  -s ours

Change-Id: I3fbb25fa40fe978b23f8e299ff046cdf87edb05d

6 years ago[automerger skipped] [automerger] Add packet length checks in l2cble_process_sig_cmd...
Jakub Pawlowski [Fri, 13 Jul 2018 06:04:37 +0000 (23:04 -0700)]
[automerger skipped] [automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182 am: 24255e38b5 am: 5f29768b74 skipped: 1703d7ed24
am: 62d297d230  -s ours

Change-Id: Ic82c4a595872d8aaf89fcb79d2697529f0d8d522

6 years agoBLE: Don't access freed buffer in log message
Nitin Shivpure [Tue, 6 Feb 2018 12:48:37 +0000 (18:18 +0530)]
BLE: Don't access freed buffer in log message

When GATT fail to write data on L2CAP, buffer is freed by L2CAP.
Accessing the buffer leads to fatal failure while printing the message info.

Test: BLE discover services and BT off test cases

Fixes: 73018520
Change-Id: I661398fd1321f6e68026b3720db4965fd6584d70
Merged-In: I661398fd1321f6e68026b3720db4965fd6584d70

6 years agoDon't use Address after it was deleted
Jakub Pawlowski [Wed, 11 Jul 2018 09:57:07 +0000 (02:57 -0700)]
Don't use Address after it was deleted

Bug: 110216173
Change-Id: Id3364cf53153eafed478546d7347ed1673217e91
Merged-In: Id3364cf53153eafed478546d7347ed1673217e91

6 years ago[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am...
Android Build Merger (Role) [Fri, 13 Jul 2018 04:47:38 +0000 (04:47 +0000)]
[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182 am: 24255e38b5 am: 5f29768b74 skipped: 1703d7ed24

Change-Id: I7de9dac1523542bc7e9568f3167a89afd976bf52

6 years ago[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am...
Android Build Merger (Role) [Fri, 13 Jul 2018 04:46:42 +0000 (04:46 +0000)]
[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182 am: 24255e38b5 am: 5f29768b74

Change-Id: Ie383d28b38e48ab437d52f0f353ca4ac68090905

6 years ago[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am...
Android Build Merger (Role) [Fri, 13 Jul 2018 04:46:39 +0000 (04:46 +0000)]
[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182 am: 24255e38b5

Change-Id: If5bf9b19b73fc89a7e0e0c5bc979075df15576ca

6 years ago[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am...
Android Build Merger (Role) [Fri, 13 Jul 2018 04:46:36 +0000 (04:46 +0000)]
[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44 am: 5af2cd5182

Change-Id: I0878b36f993fd8650c1af39bb3ec86f8ba39721b

6 years ago[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44
Android Build Merger (Role) [Fri, 13 Jul 2018 04:46:33 +0000 (04:46 +0000)]
[automerger] Add packet length checks in l2cble_process_sig_cmd am: 329b7cfb44

Change-Id: I978797eaf4d4b72432b1b5c1cd91c6374ff39f6a

6 years agoAdd packet length checks in l2cble_process_sig_cmd
Jakub Pawlowski [Fri, 22 Jun 2018 05:56:11 +0000 (22:56 -0700)]
Add packet length checks in l2cble_process_sig_cmd

Bug: 80261585
Test: compilation
Change-Id: Icf55747dc948bcce140a12658237554938e2d717
Merged-In: Icf55747dc948bcce140a12658237554938e2d717

6 years agoMerge "HID Host: Check L2CAP packet data length" into oc-dev am: 89cb224e85
Hansong Zhang [Fri, 13 Jul 2018 01:37:36 +0000 (18:37 -0700)]
Merge "HID Host: Check L2CAP packet data length" into oc-dev am: 89cb224e85
am: 12f4de2eef

Change-Id: I8a85b900e7c8317b49cf0197d8bd5b5052380b34

6 years agoMerge "Add bound check for rfc_parse_data" into oc-dev am: 0a5838d047
Hansong Zhang [Fri, 13 Jul 2018 01:37:14 +0000 (18:37 -0700)]
Merge "Add bound check for rfc_parse_data" into oc-dev am: 0a5838d047
am: 6e587e5c9b

Change-Id: Ib22851ee7c8e68ec43c14b640c58b286f08f16bd

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev am...
Hansong Zhang [Fri, 13 Jul 2018 01:36:51 +0000 (18:36 -0700)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev am: c5830db06a
am: 953bd8df9b

Change-Id: I32011dd85bcde1c550058eacd1bb8649a6c2b3c1

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev am...
Hansong Zhang [Fri, 13 Jul 2018 01:36:17 +0000 (18:36 -0700)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev am: 91aa6dd927
am: 2291879cbf

Change-Id: Ic36e1cb7841cf5770ef7b524c35b0bb3b7266c40

6 years agoMerge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev am...
Hansong Zhang [Fri, 13 Jul 2018 01:35:43 +0000 (18:35 -0700)]
Merge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev am: 15b3c81008
am: 08374e2cc6

Change-Id: Ifd0e87e2a6e104f0c7da974662990a73b3b806b5

6 years agoMerge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev am: f867aa6b14
Hansong Zhang [Fri, 13 Jul 2018 01:35:07 +0000 (18:35 -0700)]
Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev am: f867aa6b14
am: 539f871a6a

Change-Id: Iaccd79bedcb973757fe04daba941074df0ff1bc7

6 years agoMerge "HID Host: Check L2CAP packet data length" into oc-dev
Hansong Zhang [Fri, 13 Jul 2018 00:31:23 +0000 (17:31 -0700)]
Merge "HID Host: Check L2CAP packet data length" into oc-dev
am: 89cb224e85

Change-Id: I7933dec63587b3a9b97db9754216e6de86c01ea6

6 years agoMerge "Add bound check for rfc_parse_data" into oc-dev
Hansong Zhang [Fri, 13 Jul 2018 00:29:57 +0000 (17:29 -0700)]
Merge "Add bound check for rfc_parse_data" into oc-dev
am: 0a5838d047

Change-Id: Ie179b9e57a8aa42251cab8ed0dcf5ef91fe1a244

6 years agoMerge "HID Host: Check L2CAP packet data length" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 23:46:02 +0000 (23:46 +0000)]
Merge "HID Host: Check L2CAP packet data length" into oc-dev

6 years agoMerge "Add bound check for rfc_parse_data" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 23:44:27 +0000 (23:44 +0000)]
Merge "Add bound check for rfc_parse_data" into oc-dev

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev
Hansong Zhang [Thu, 12 Jul 2018 23:31:02 +0000 (16:31 -0700)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev
am: c5830db06a

Change-Id: I9c42d24c941977bf803df7c1411622c1a921c7fa

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev
Hansong Zhang [Thu, 12 Jul 2018 23:30:22 +0000 (16:30 -0700)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev
am: 91aa6dd927

Change-Id: I34949e1ee58489ac2c690f023672a749bdcb2698

6 years agoMerge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev
Hansong Zhang [Thu, 12 Jul 2018 23:29:34 +0000 (16:29 -0700)]
Merge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev
am: 15b3c81008

Change-Id: I692f9c4d27a6f3d2594828b96928e3f50bb1d111

6 years agoMerge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev
Hansong Zhang [Thu, 12 Jul 2018 23:28:48 +0000 (16:28 -0700)]
Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev
am: f867aa6b14

Change-Id: I79868f8b17f4fed7294bc6064f082f8f93b2d272

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-mr2-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-mr2-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8 am: 601d0100e1
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into cw-f-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into cw-f-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-mr1-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-dr1-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into nyc-dr1-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge "DO NOT MERGE HID Host: Check L2CAP packet data length" into nyc-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge "DO NOT MERGE HID Host: Check L2CAP packet data length" into nyc-dev

6 years agoMerge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:28:54 +0000 (22:28 +0000)]
Merge changes from topic "am-3e56facc-2987-45a7-902e-643b62b0dad3" into oc-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8 am: 601d0100e1 skipped: 668d018967
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8 am: 601d0100e1
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into oc-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a am: 6b3dd6bb73 skipped: 24328f30a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a am: 6b3dd6bb73
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-mr2-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-mr2-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a am: 6b3dd6bb73
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into cw-f-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into cw-f-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e am: cb4a2ef45a
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-mr1-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349 am: 549ece211e
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dr1-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dr1-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7 am: f2648df349
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoMerge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dev
TreeHugger Robot [Thu, 12 Jul 2018 22:17:26 +0000 (22:17 +0000)]
Merge changes from topic "am-de483eec-fa20-48e1-8e14-9d6660359644" into nyc-dev

* changes:
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060 skipped: a8668154b7
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2 am: 56c5b8f060
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2 am: 7d941ad3a2
  [automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 2da73209f2
  DO NOT MERGE HID Host: Check L2CAP packet data length

6 years agoBLE: Don't access freed buffer in log message
Nitin Shivpure [Tue, 6 Feb 2018 12:48:37 +0000 (18:18 +0530)]
BLE: Don't access freed buffer in log message

When GATT fail to write data on L2CAP, buffer is freed by L2CAP.
Accessing the buffer leads to fatal failure while printing the message info.

Test: BLE discover services and BT off test cases

Fixes: 73018520
Change-Id: I661398fd1321f6e68026b3720db4965fd6584d70
Merged-In: I661398fd1321f6e68026b3720db4965fd6584d70

6 years agoMerge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 21:10:42 +0000 (21:10 +0000)]
Merge changes from topic "am-849ff548-1de9-4e50-a013-4d02bb85a1d2" into oc-dev

* changes:
  [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589 am: 898cf06169 skipped: f4cfe48029
  [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589 am: 898cf06169
  [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589
  [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127
  [automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27
  DO NOT MERGE Fix OOB read in process_l2cap_cmd

6 years agoMerge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into nyc-dev
TreeHugger Robot [Thu, 12 Jul 2018 21:10:42 +0000 (21:10 +0000)]
Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into nyc-dev

6 years agoMerge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 21:10:21 +0000 (21:10 +0000)]
Merge "DO NOT MERGE Fix OOB read in process_l2cap_cmd" into oc-dev

6 years agoMerge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev am: b20fe49eda
Jakub Pawlowski [Thu, 12 Jul 2018 20:53:46 +0000 (13:53 -0700)]
Merge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev am: b20fe49eda
am: 18519969e6

Change-Id: I7c5e86edf816862b61974c50f91c184afcab51cc

6 years agoMerge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev
Jakub Pawlowski [Thu, 12 Jul 2018 20:19:37 +0000 (13:19 -0700)]
Merge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev
am: b20fe49eda

Change-Id: I4fd9e4c93bc35fb27c2ef880a3429bdb57245368

6 years agoMerge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev
TreeHugger Robot [Thu, 12 Jul 2018 19:57:41 +0000 (19:57 +0000)]
Merge "Add packet length checks in l2cble_process_sig_cmd" into oc-dev

6 years agoMerge "Don't use Address after it was deleted" into oc-mr1-dev
TreeHugger Robot [Thu, 12 Jul 2018 19:51:18 +0000 (19:51 +0000)]
Merge "Don't use Address after it was deleted" into oc-mr1-dev

6 years ago[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a872...
Android Build Merger (Role) [Thu, 12 Jul 2018 18:01:34 +0000 (18:01 +0000)]
[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589 am: 898cf06169 skipped: f4cfe48029

Change-Id: I98ecf9ab16e9c9c24ff7a1781e36a9fadeb42115

6 years ago[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a872...
Android Build Merger (Role) [Thu, 12 Jul 2018 18:01:32 +0000 (18:01 +0000)]
[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589 am: 898cf06169

Change-Id: I378c40e92e859a4cc56cc9f829548f87ec428229

6 years ago[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a872...
Android Build Merger (Role) [Thu, 12 Jul 2018 18:01:30 +0000 (18:01 +0000)]
[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127 am: 9c82c5a589

Change-Id: Id65e168ed91b72a4044597dd31f7e2fde17d9d0b

6 years ago[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127
Android Build Merger (Role) [Thu, 12 Jul 2018 18:01:28 +0000 (18:01 +0000)]
[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27 am: 09a8721127

Change-Id: Iafc38d72f8e320249fc81c423b83aa119bcc3a01

6 years ago[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27
Android Build Merger (Role) [Thu, 12 Jul 2018 18:01:25 +0000 (18:01 +0000)]
[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 55afdafb27

Change-Id: I285fea77251b0f7734969ba989a0d40d26e95bd3

6 years agoDO NOT MERGE Fix OOB read in process_l2cap_cmd
Hansong Zhang [Thu, 12 Jul 2018 18:00:53 +0000 (11:00 -0700)]
DO NOT MERGE Fix OOB read in process_l2cap_cmd

Test: manual
Bug: 79488381
Change-Id: I723866ed40d3647fed99875f659bb95df96a6969

6 years agoDO NOT MERGE Fix OOB read in process_l2cap_cmd
Hansong Zhang [Thu, 12 Jul 2018 17:51:30 +0000 (10:51 -0700)]
DO NOT MERGE Fix OOB read in process_l2cap_cmd

Test: manual
Bug: 79488381
Change-Id: I723866ed40d3647fed99875f659bb95df96a6969

6 years ago[automerger skipped] [automerger] SDP: return error on offset bigger than atribute...
Jakub Pawlowski [Thu, 12 Jul 2018 09:20:56 +0000 (02:20 -0700)]
[automerger skipped] [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54 am: be55f29975 am: 038f86e4b2 skipped: 529df1e98d am: b762422828  -s ours
am: 9600a8ce06  -s ours

Change-Id: I772f355ae6699136699dff7ebcee574ba4affa92

6 years ago[automerger skipped] [automerger] SDP: return error on offset bigger than atribute...
Jakub Pawlowski [Thu, 12 Jul 2018 09:18:02 +0000 (02:18 -0700)]
[automerger skipped] [automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54 am: be55f29975 am: 038f86e4b2 skipped: 529df1e98d
am: b762422828  -s ours

Change-Id: I39b1ceb8ebb02b5a05d7d7a5d086624b9d7a4d1c

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:42:03 +0000 (07:42 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54 am: be55f29975 am: 038f86e4b2 skipped: 529df1e98d

Change-Id: If7e8de188370113ced4bb81c9a31b73eb6669512

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:26 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54 am: be55f29975 am: 038f86e4b2

Change-Id: I4d8b0fd5c2b026105e169eb35b3e34de72f5b503

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:24 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54 am: be55f29975

Change-Id: Iddf996897230996becbf4f1975fb97b80edbd71a

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:21 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05 am: 0e36165a54

Change-Id: I4aa5b4cd6f852466c6233c9afb51165c06c4616b

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:18 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c am: 612ba99b05

Change-Id: Ie004d032313f29c4124c2a114469886429c4cccd

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:15 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624 am: 05ba05199c

Change-Id: I95b70f63b81df6f58b516b83853fc0bbef7eccc8

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:12 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca am: 1c4f9c9624

Change-Id: Idb5ac3b18ec180a90eca120754d601c1ba68edbf

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d...
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:10 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d am: 67c78b25ca

Change-Id: I3e68fbd29ce151c4829fe6077d76bc3822915c8f

6 years ago[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d
Android Build Merger (Role) [Thu, 12 Jul 2018 07:41:07 +0000 (07:41 +0000)]
[automerger] SDP: return error on offset bigger than atribute length am: 3565eaf72d

Change-Id: Ic7b10e46c591edff7f86c06dee6beb8ca8798121

6 years agoSDP: return error on offset bigger than atribute length
Jakub Pawlowski [Fri, 22 Jun 2018 11:46:39 +0000 (04:46 -0700)]
SDP: return error on offset bigger than atribute length

Test: none
Bug: 79217770
Change-Id: I8b594882dd07644b1a747c53d6166db466b7e998
Merged-In: I8b594882dd07644b1a747c53d6166db466b7e998

6 years ago[automerger skipped] Merge "HFP: Fix out of bound access in phone number processing...
Hansong Zhang [Wed, 11 Jul 2018 21:28:57 +0000 (14:28 -0700)]
[automerger skipped] Merge "HFP: Fix out of bound access in phone number processing" into oc-dev am: 6208c7956b  -s ours
am: e5e17f0c15  -s ours

Change-Id: I5099a757887f9ce0bae4deef4b907633f959607a

6 years ago[automerger skipped] Merge "HFP: Fix out of bound access in phone number processing...
Hansong Zhang [Wed, 11 Jul 2018 21:16:23 +0000 (14:16 -0700)]
[automerger skipped] Merge "HFP: Fix out of bound access in phone number processing" into oc-dev
am: 6208c7956b  -s ours

Change-Id: If89074b33649f8956290d26ce9471a36806b9706

6 years agoSDP: return error on offset bigger than atribute length am: 0a74ffa44c
Jakub Pawlowski [Wed, 11 Jul 2018 21:06:23 +0000 (14:06 -0700)]
SDP: return error on offset bigger than atribute length am: 0a74ffa44c
am: ff7a2e2592

Change-Id: Id673cf366e28adbd86943caf52d324e23ac95ad8

6 years agoMerge "HFP: Fix out of bound access in phone number processing" into oc-dev
TreeHugger Robot [Wed, 11 Jul 2018 21:02:39 +0000 (21:02 +0000)]
Merge "HFP: Fix out of bound access in phone number processing" into oc-dev

6 years agoSDP: return error on offset bigger than atribute length
Jakub Pawlowski [Wed, 11 Jul 2018 20:56:08 +0000 (13:56 -0700)]
SDP: return error on offset bigger than atribute length
am: 0a74ffa44c

Change-Id: If4811a2a90eec03ab430420ff830aac96abb1590

6 years agoSDP: return error on offset bigger than atribute length
Jakub Pawlowski [Fri, 22 Jun 2018 11:46:39 +0000 (04:46 -0700)]
SDP: return error on offset bigger than atribute length

Test: none
Bug: 79217770
Change-Id: I8b594882dd07644b1a747c53d6166db466b7e998

6 years agoMerge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into...
Jack He [Wed, 11 Jul 2018 17:51:41 +0000 (10:51 -0700)]
Merge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into oc-dev am: 68f3762633
am: 0a352983a9

Change-Id: I0ab90774f01847db0fd45c611ed5a78c51282abb

6 years agoMerge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into...
Jack He [Wed, 11 Jul 2018 17:44:52 +0000 (10:44 -0700)]
Merge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into oc-dev
am: 68f3762633

Change-Id: I9a3b92eac44c572db7efc30b937f499808098bd6

6 years agoMerge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev am: 7845f60787
Hansong Zhang [Wed, 11 Jul 2018 17:38:26 +0000 (10:38 -0700)]
Merge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev am: 7845f60787
am: 91d327b4af

Change-Id: I8871cc22dd5a5166e3a63c412b1f22039f6ecf84

6 years agoHFP: Fix out of bound access in phone number processing
Hansong Zhang [Wed, 27 Jun 2018 21:26:40 +0000 (14:26 -0700)]
HFP: Fix out of bound access in phone number processing

* Write at most sizeof(dialnum) chars into dialnum array in ClccResponse
  method
* Write at most sizeof(ag_res.str) - 5 chars into ag_res.str array in
  PhoneStateChange method

Bug: 79431031
Bug: 79266386
Test: make call with super long phone numbers
Change-Id: I98e7687ac4055800aa46626c6b1c866e52e474df
Merged-In: I98e7687ac4055800aa46626c6b1c866e52e474df

6 years agoMerge "DO NOT MERGE HFP: Fix out of bound access in phone number processing" into...
TreeHugger Robot [Wed, 11 Jul 2018 17:36:21 +0000 (17:36 +0000)]
Merge "DO NOT MERGE HFP: Fix out of bound access in phone number processing" into nyc-dev

6 years agoMerge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into...
TreeHugger Robot [Wed, 11 Jul 2018 17:36:21 +0000 (17:36 +0000)]
Merge changes from topic "bt-hfp-fix-phone-number-buffer-underflow-nyc-dev" into oc-dev

* changes:
  [automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923 am: 74de3ffb10 skipped: 2b83b53d14
  [automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923 am: 74de3ffb10
  [automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923
  [automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394
  [automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204
  DO NOT MERGE HFP: Fix out of bound access in phone number processing

6 years agoMerge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev
Hansong Zhang [Wed, 11 Jul 2018 17:33:27 +0000 (10:33 -0700)]
Merge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev
am: 7845f60787

Change-Id: I3a100ebcb66a89ba3092c9bb3c4ff02adee3a59d

6 years agoMerge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev
TreeHugger Robot [Wed, 11 Jul 2018 17:30:33 +0000 (17:30 +0000)]
Merge "HIDD: Prevent integer underflow in bta_hd_act" into oc-dev

6 years agoDon't use Address after it was deleted
Jakub Pawlowski [Wed, 11 Jul 2018 09:57:07 +0000 (02:57 -0700)]
Don't use Address after it was deleted

Bug: 110216173
Change-Id: Id3364cf53153eafed478546d7347ed1673217e91

6 years agoHIDD: Prevent integer underflow in bta_hd_act
Hansong Zhang [Thu, 21 Jun 2018 23:53:41 +0000 (16:53 -0700)]
HIDD: Prevent integer underflow in bta_hd_act

Bug: 109757435
Bug: 109757168
Bug: 110846194
Bug: 109757986
Test: manual
Change-Id: I80a6f3f931ac7512f1ba801cc5d8de6ac04f3422

6 years ago[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing...
Android Build Merger (Role) [Thu, 28 Jun 2018 00:11:29 +0000 (00:11 +0000)]
[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923 am: 74de3ffb10 skipped: 2b83b53d14

Change-Id: Ia010cee89c1922b01dd34e439830190561461bbf

6 years ago[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing...
Android Build Merger (Role) [Thu, 28 Jun 2018 00:11:27 +0000 (00:11 +0000)]
[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923 am: 74de3ffb10

Change-Id: Idb6c305daa5fcded453a2e9f53c0bb6c6cce20a7

6 years ago[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing...
Android Build Merger (Role) [Thu, 28 Jun 2018 00:11:25 +0000 (00:11 +0000)]
[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394 am: 2bddcfa923

Change-Id: If5bf4635d837d15ab593d96c116489057e212710

6 years ago[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing...
Android Build Merger (Role) [Thu, 28 Jun 2018 00:11:23 +0000 (00:11 +0000)]
[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204 am: fecf347394

Change-Id: I1a6a4a91c9f926af586675cc8f8a290f4e312945

6 years ago[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing...
Android Build Merger (Role) [Thu, 28 Jun 2018 00:11:12 +0000 (00:11 +0000)]
[automerger] DO NOT MERGE HFP: Fix out of bound access in phone number processing am: 82371c1204

Change-Id: Ie6f3408d074604cf89aa9c8dc5f63447fdba8b64

6 years agoDO NOT MERGE HFP: Fix out of bound access in phone number processing
Jack He [Wed, 27 Jun 2018 00:53:24 +0000 (17:53 -0700)]
DO NOT MERGE HFP: Fix out of bound access in phone number processing

* Write at most sizeof(dialnum) chars into dialnum array in ClccResponse
  method
* Write at most sizeof(ag_res.str) - 5 chars into ag_res.str array in
  PhoneStateChange method

Bug: 79431031
Bug: 79266386
Test: make call with super long phone numbers
Change-Id: I98e7687ac4055800aa46626c6b1c866e52e474df
Merged-In: I98e7687ac4055800aa46626c6b1c866e52e474df

6 years agoDO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy am: 1d9a58768e
Hansong Zhang [Wed, 27 Jun 2018 22:19:49 +0000 (15:19 -0700)]
DO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy am: 1d9a58768e
am: 248fd6200b

Change-Id: I786d844e462ea06f18083f4d47a2f6c786bfc466

6 years agoDO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy
Hansong Zhang [Wed, 27 Jun 2018 22:16:12 +0000 (15:16 -0700)]
DO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy
am: 1d9a58768e

Change-Id: I7f9ca99de72d0e142210943163a6a3d4b1f61c1d

6 years agoAdd packet length checks in l2cble_process_sig_cmd
Jakub Pawlowski [Fri, 22 Jun 2018 05:56:11 +0000 (22:56 -0700)]
Add packet length checks in l2cble_process_sig_cmd

Bug: 80261585
Test: compilation
Change-Id: Icf55747dc948bcce140a12658237554938e2d717

6 years agoDO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy
Hansong Zhang [Thu, 14 Jun 2018 00:33:23 +0000 (17:33 -0700)]
DO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av_event_deep_copy

p_msg_src->browse.p_browse_data is not copied, but used after the
original pointer is freed

Bug: 109699112
Test: manual
Change-Id: I1d014eb9a8911da6913173a9b11218bf1c89e16e

6 years agoHID Host: Check L2CAP packet data length
Hansong Zhang [Thu, 7 Jun 2018 21:25:09 +0000 (14:25 -0700)]
HID Host: Check L2CAP packet data length

Bug: 80493272
Test: manual
Change-Id: I8b1acd11616684729752195fabb4fa34c46a508d

6 years agoAdd bound check for rfc_parse_data
Hansong Zhang [Thu, 7 Jun 2018 23:18:52 +0000 (16:18 -0700)]
Add bound check for rfc_parse_data

Bug: 78288018
Test: manual
Change-Id: I44349cd22c141483d01bce0f5a2131b727d0feb0

6 years ago[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a...
Android Build Merger (Role) [Thu, 7 Jun 2018 21:28:31 +0000 (21:28 +0000)]
[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8 am: 601d0100e1 skipped: 668d018967

Change-Id: I23f2433c33cb3cba8983b747d0dddc75c8f36b35

6 years ago[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a...
Android Build Merger (Role) [Thu, 7 Jun 2018 21:28:29 +0000 (21:28 +0000)]
[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8 am: 601d0100e1

Change-Id: Ia01ca5d72edd9ce5b2d7f4c1167617e071bd561b

6 years ago[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a...
Android Build Merger (Role) [Thu, 7 Jun 2018 21:28:27 +0000 (21:28 +0000)]
[automerger] DO NOT MERGE HID Host: Check L2CAP packet data length am: 4344cfb76a am: ece21d2579 am: 5866f8bfd8

Change-Id: I5b5bd8bd129b8c701edd493c05781fe3882d41f9