git.osdn.net Git - android-x86/system-bt.git/log

(root) / android-x86 / system-bt.git / log

Android Build Merger (Role) [Thu, 29 Nov 2018 11:51:37 +0000 (11:51 +0000)]

[automerger] Fix buffer overflow in btif_dm_data_copy am: d117975904 am: 12d8535d0f

Change-Id: I22ea297e564616790fd7e916747cdcea25d2b068

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 29 Nov 2018 11:51:34 +0000 (11:51 +0000)]

[automerger] Fix buffer overflow in btif_dm_data_copy am: d117975904

Change-Id: Icbd5b31039dbf3016575f9d6d69b216d76564c96

commit | commitdiff | tree

Jakub Pawlowski [Tue, 27 Nov 2018 16:59:57 +0000 (17:59 +0100)]

Fix buffer overflow in btif_dm_data_copy

When we use a union, we should always define variables as the union type,
not as one of the field subtypes. If the latter is cast to the union type,
buffer overflow can happen.

Bug: 110166268
Test: compilation
Change-Id: I473c03b099ad5a326e7a3739f65efd33cf4775bd
Merged-In: I473c03b099ad5a326e7a3739f65efd33cf4775bd

commit | commitdiff | tree

Android Build Merger (Role) [Tue, 27 Nov 2018 16:47:42 +0000 (16:47 +0000)]

[automerger] Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm am: 78508d2c2c am: a236f16071

Change-Id: I8615cedf8b9192c46506c54934229089021fe101

commit | commitdiff | tree

Android Build Merger (Role) [Tue, 27 Nov 2018 16:47:40 +0000 (16:47 +0000)]

[automerger] Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm am: 78508d2c2c

Change-Id: If8da202c56ee7deeb7aba67f59b19ef28466f6ae

commit | commitdiff | tree

Jakub Pawlowski [Tue, 20 Nov 2018 21:31:31 +0000 (22:31 +0100)]

Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfm

Bug: 116222069
Test: compilation
Change-Id: Iebe2c500dfc2806ca321fdcd170e20c680619d4d
Merged-In: Iebe2c500dfc2806ca321fdcd170e20c680619d4d

commit | commitdiff | tree

Hansong Zhang [Mon, 5 Nov 2018 18:03:36 +0000 (18:03 +0000)]

Merge "DO NOT MERGE HFP: Check AT command buffer boundary during parsing" into nyc-dev

commit | commitdiff | tree

Android Build Merger (Role) [Mon, 5 Nov 2018 18:01:26 +0000 (18:01 +0000)]

[automerger skipped] DO NOT MERGE HFP: Check AT command buffer boundary during parsing skipped: 163dec2ae1 skipped: 9805ed7a7a

Change-Id: I5977408e04b4479c9aa2b5d16a03e18d7e9deced

commit | commitdiff | tree

Android Build Merger (Role) [Mon, 5 Nov 2018 18:01:25 +0000 (18:01 +0000)]

[automerger skipped] DO NOT MERGE HFP: Check AT command buffer boundary during parsing skipped: 163dec2ae1

Change-Id: I406dd66fa46d18b70d48faedf810d6a3ddbe3fbc

commit | commitdiff | tree

TreeHugger Robot [Mon, 5 Nov 2018 17:16:34 +0000 (17:16 +0000)]

Merge "DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Mon, 5 Nov 2018 17:16:34 +0000 (17:16 +0000)]

Merge changes from topic "am-154171ba-0805-48c6-88cf-c592ee3cf37c" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act am: a4a11e1981 am: 9172befdc8
  [automerger] DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act am: a4a11e1981
  DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act

commit | commitdiff | tree

TreeHugger Robot [Mon, 5 Nov 2018 17:16:34 +0000 (17:16 +0000)]

Merge changes from topic "am-154171ba-0805-48c6-88cf-c592ee3cf37c" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act am: a4a11e1981
DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act

commit | commitdiff | tree

TreeHugger Robot [Sat, 3 Nov 2018 00:37:33 +0000 (00:37 +0000)]

Merge "DO NOT MERGE HFP: Check AT command buffer boundary during parsing" into nyc-mr1-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:47:59 +0000 (22:47 +0000)]

Merge "DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:47:59 +0000 (22:47 +0000)]

Merge changes from topic "am-3290ac2a-4a57-4151-aaf8-9695d2ed6348" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr am: 2091fe7501
DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:47:59 +0000 (22:47 +0000)]

Merge changes from topic "am-3290ac2a-4a57-4151-aaf8-9695d2ed6348" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr am: 2091fe7501 am: 4494b9be43
  [automerger] DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr am: 2091fe7501
  DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:43:43 +0000 (22:43 +0000)]

Merge "DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:43:43 +0000 (22:43 +0000)]

Merge changes from topic "am-a8794701-2d32-4392-bf6f-9d00a3751e39" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp am: 840f70ca1e
DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp

commit | commitdiff | tree

TreeHugger Robot [Fri, 2 Nov 2018 22:43:43 +0000 (22:43 +0000)]

Merge changes from topic "am-a8794701-2d32-4392-bf6f-9d00a3751e39" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp am: 840f70ca1e am: c1f3afedf3
  [automerger] DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp am: 840f70ca1e
  DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp

commit | commitdiff | tree

Chienyuan [Thu, 11 Oct 2018 02:36:57 +0000 (10:36 +0800)]

DO NOT MERGE HFP: Check AT command buffer boundary during parsing

* add p_end parameter to tBTA_AG_AT_CMD_CBACK, bta_ag_at_hsp_cback
and bta_ag_at_hfp_cback to indicate effective data range of p_arg
* add checks for buffer copy overflow in bta_ag_at_hsp_cback and
bta_ag_at_hfp_cback
* add packet legnth checks with p_end in bta_ag_parse_cmer
* add packet length checks with p_end in bta_ag_parse_bac

Bug: 112860487
Test: manual
Change-Id: Idbfa2b8bd4c1a0aeeacfe34349851b3bc8de7c69
Merged-In: Idbfa2b8bd4c1a0aeeacfe34349851b3bc8de7c69
(cherry picked from commit 5b1ef1038e3f4e4371c3d6718bf0f684be65eb2b)

commit | commitdiff | tree

Chienyuan [Thu, 11 Oct 2018 02:36:57 +0000 (10:36 +0800)]

DO NOT MERGE HFP: Check AT command buffer boundary during parsing

* add p_end parameter to tBTA_AG_AT_CMD_CBACK, bta_ag_at_hsp_cback
and bta_ag_at_hfp_cback to indicate effective data range of p_arg
* add checks for buffer copy overflow in bta_ag_at_hsp_cback and
bta_ag_at_hfp_cback
* add packet legnth checks with p_end in bta_ag_parse_cmer
* add packet length checks with p_end in bta_ag_parse_bac

Bug: 112860487
Test: manual
Change-Id: Idbfa2b8bd4c1a0aeeacfe34349851b3bc8de7c69
(cherry picked from commit 5b1ef1038e3f4e4371c3d6718bf0f684be65eb2b)

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 16:37:16 +0000 (16:37 +0000)]

[automerger] DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr am: 2091fe7501 am: 4494b9be43

Change-Id: Ie42e3bd1a03ef61a7229ffa5d099127ee8048d2a

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 16:37:14 +0000 (16:37 +0000)]

[automerger] DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr am: 2091fe7501

Change-Id: I4bdd3180984cb58b839a4d0625dfb37cb5a4e405

commit | commitdiff | tree

Myles Watson [Thu, 25 Oct 2018 00:05:12 +0000 (17:05 -0700)]

DO NOT MERGE: SDP: Check p_end in save_attr_seq and add_attr

Bug: 115900043
Test: Sanity pairing and SDP PTS
Change-Id: Ib642f79ed22b65ede5ff786cb1e163d172480f11

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 16:20:12 +0000 (16:20 +0000)]

[automerger] DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp am: 840f70ca1e am: c1f3afedf3

Change-Id: I63664999ef4f512592a940d5bbeb8c64a7b31aff

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 16:20:11 +0000 (16:20 +0000)]

[automerger] DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp am: 840f70ca1e

Change-Id: Id89a5a5ac1a23b5d657bfe33bcc881f76746fac6

commit | commitdiff | tree

Myles Watson [Thu, 25 Oct 2018 22:27:03 +0000 (15:27 -0700)]

DO NOT MERGE: MCAP: Check response length in mca_ccb_hdl_rsp

Bug: 116319076
Test: Send a short MCAP response
Change-Id: I0452f7d2c0f4ecccc7a6501773e26b403b116179

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 15:56:48 +0000 (15:56 +0000)]

[automerger] DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act am: a4a11e1981 am: 9172befdc8

Change-Id: I137bcb668670c62a0970af340eaaea7e1e69d614

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 1 Nov 2018 15:56:47 +0000 (15:56 +0000)]

[automerger] DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act am: a4a11e1981

Change-Id: I72ddadf35350b72a755d92be554a638d6ed476aa

commit | commitdiff | tree

Myles Watson [Thu, 25 Oct 2018 21:33:33 +0000 (14:33 -0700)]

DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl_dat_act

Bug: 116108738
Test: send a malformed GET_IDLE command with no parameters
Change-Id: Ic57e748a06ea6d4fc16868310d3423ee71a7ac8c

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 31 Oct 2018 23:35:03 +0000 (23:35 +0000)]

[automerger] DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data am: ad4098c340 am: 8ee587afbb

Change-Id: Id0a40d0a6138e05b9038a09751a53a3f6deef786

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 31 Oct 2018 23:35:00 +0000 (23:35 +0000)]

[automerger] DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data am: ad4098c340

Change-Id: I43e5409e91d531854545e2d9ed10389f8f10db01

commit | commitdiff | tree

Ugo Yu [Mon, 29 Oct 2018 17:57:06 +0000 (01:57 +0800)]

DO NOT MERGE: Fix possible OOB when AVDT data channel recive ACL data

Bug: 111450156

Change-Id: Id23eeedcb7bde5866cd53a2f7f1c30f27c5352f6
(cherry picked from commit b0125caafec2183d73fc899ce5a8aee43a6e54af)

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:32 +0000 (22:20 +0000)]

[automerger] Fix possible OOB read in process_service_search_rsp am: b6fa6e4fff am: 8c06d18eea

Change-Id: I489c10b25faf0f1a0725e29b9f2bd7c1d17389e2

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 11 Oct 2018 22:20:29 +0000 (22:20 +0000)]

[automerger] Fix possible OOB read in process_service_search_rsp am: b6fa6e4fff

Change-Id: Id18234fccee442ea5f2ff7ad9bcf193dd50226b3

commit | commitdiff | tree

Jakub Pawlowski [Wed, 10 Oct 2018 18:07:12 +0000 (20:07 +0200)]

Fix possible OOB read in process_service_search_rsp

Bug: 74249842
Change-Id: I0dbe43f0da1f5a8f14bcb69659752de4bd70ca98
Merged-In: I0dbe43f0da1f5a8f14bcb69659752de4bd70ca98

commit | commitdiff | tree

Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:49 +0000 (12:49 +0000)]

[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am: 87bcda81b8 am: 8e31e9abb4

Change-Id: Icfc1e9961a59325a522ab4385411efe446b19ce1

commit | commitdiff | tree

Android Build Merger (Role) [Tue, 18 Sep 2018 12:49:46 +0000 (12:49 +0000)]

[automerger] DO NOT MERGE - Check SDU lower bound before allocate p_data am: 87bcda81b8

Change-Id: I51d65f4d9ddba01e86ee88b600e820af4f431415

commit | commitdiff | tree

Ugo Yu [Tue, 18 Sep 2018 12:49:22 +0000 (20:49 +0800)]

DO NOT MERGE - Check SDU lower bound before allocate p_data

Bug: 112321180
Test: SL4A BleCocTest:test_coc_insecured_connection_write_ascii
Change-Id: Id0c9aa2097f0b6bdc2bb9fa9086daa9452188e1d

commit | commitdiff | tree

TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]

Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am: 8148397ca2 am: 1f7ced7d2f
  [automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am: 8148397ca2
  DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses

commit | commitdiff | tree

TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]

Merge changes from topic "bt-security-avrc_pars_vendor_rsp-length-check-nyc-dev" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am: 8148397ca2
DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses

commit | commitdiff | tree

TreeHugger Robot [Fri, 7 Sep 2018 16:16:19 +0000 (16:16 +0000)]

Merge "DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses" into nyc-dev

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:49 +0000 (04:59 +0000)]

[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am: b4cf8416bf am: c0e2026eb1

Change-Id: I06ca49edef4db3a930150ba7a6b875d6727ae50d

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 7 Sep 2018 04:59:47 +0000 (04:59 +0000)]

[automerger] DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp() am: b4cf8416bf

Change-Id: I74cd9a6ffa3096d58b11092095b82f69fc94a3b7

commit | commitdiff | tree

Pavlin Radoslavov [Thu, 6 Sep 2018 22:41:27 +0000 (15:41 -0700)]

DO NOT MERGE - Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()

Bug: 111450417
Test: PoC test program
Change-Id: Idd619e52dc7a2944d0d08af824505580e299c163
(cherry picked from commit 2692408d05bf16738284b61833649cee5d2a2233)

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:32 +0000 (00:42 +0000)]

[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am: 8148397ca2 am: 1f7ced7d2f

Change-Id: Ia57b0cdffd9d0db790e002679342611c036b5788

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 7 Sep 2018 00:42:31 +0000 (00:42 +0000)]

[automerger] DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses am: 8148397ca2

Change-Id: I986e2bb8acf0330ef5e8caa37180a5884725c2e6

commit | commitdiff | tree

Pavlin Radoslavov [Thu, 6 Sep 2018 01:21:31 +0000 (18:21 -0700)]

DO NOT MERGE - Check data length when parsing AVRCP vendor specific command responses

Bug: 111450531
Bug: 111896861
Test: PoC test program
Change-Id: I564bee8f05efabc29383659a75e695b4da76c6aa
(cherry picked from commit 7439ea940354f65a147c4ecfce3bada49c688047)

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 23:13:53 +0000 (23:13 +0000)]

Merge changes from topic "am-dcf0c368-3f3f-440a-998e-f94bd1924189" into nyc-mr1-dev

* changes:
  [automerger] Checks the SMP length to fix OOB read am: 353faee793 am: 9343dda4d3
  [automerger] Checks the SMP length to fix OOB read am: 353faee793
  Checks the SMP length to fix OOB read

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 23:13:53 +0000 (23:13 +0000)]

Merge changes from topic "am-dcf0c368-3f3f-440a-998e-f94bd1924189" into nyc-dr1-dev

* changes:
[automerger] Checks the SMP length to fix OOB read am: 353faee793
Checks the SMP length to fix OOB read

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 23:13:53 +0000 (23:13 +0000)]

Merge "Checks the SMP length to fix OOB read" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:55:20 +0000 (20:55 +0000)]

Merge changes from topic "am-df95a56f-528f-434c-972e-bb492348a21a" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE Add packet length check in smp_proc_master_id am: 36bbbbf8db am: 141409e120
  [automerger] DO NOT MERGE Add packet length check in smp_proc_master_id am: 36bbbbf8db
  DO NOT MERGE Add packet length check in smp_proc_master_id

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:55:20 +0000 (20:55 +0000)]

Merge changes from topic "am-df95a56f-528f-434c-972e-bb492348a21a" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE Add packet length check in smp_proc_master_id am: 36bbbbf8db
DO NOT MERGE Add packet length check in smp_proc_master_id

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:55:20 +0000 (20:55 +0000)]

Merge "DO NOT MERGE Add packet length check in smp_proc_master_id" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:06:42 +0000 (20:06 +0000)]

Merge changes from topic "bt-avrcp-check-avrc_msg_cback-nyc-dev" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback am: b78d265f36 am: 750f173103
  [automerger] DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback am: b78d265f36
  DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:06:42 +0000 (20:06 +0000)]

Merge changes from topic "bt-avrcp-check-avrc_msg_cback-nyc-dev" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback am: b78d265f36
DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 20:06:42 +0000 (20:06 +0000)]

Merge "DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:52:34 +0000 (19:52 +0000)]

Merge changes from topic "am-c2d9879f-e9d2-44f3-9012-53037ab580a0" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE Check packet length in bta_av_proc_meta_cmd am: 82815f4498 am: 1bf18942ad
  [automerger] DO NOT MERGE Check packet length in bta_av_proc_meta_cmd am: 82815f4498
  DO NOT MERGE Check packet length in bta_av_proc_meta_cmd

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:52:34 +0000 (19:52 +0000)]

Merge changes from topic "am-c2d9879f-e9d2-44f3-9012-53037ab580a0" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE Check packet length in bta_av_proc_meta_cmd am: 82815f4498
DO NOT MERGE Check packet length in bta_av_proc_meta_cmd

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:52:34 +0000 (19:52 +0000)]

Merge "DO NOT MERGE Check packet length in bta_av_proc_meta_cmd" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:43:29 +0000 (19:43 +0000)]

Merge changes from topic "am-a988fd47-73ee-44e9-929f-5374e8851656" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE Fix OOB read before buffer length check am: e64b4a38b0 am: d952a36975
  [automerger] DO NOT MERGE Fix OOB read before buffer length check am: e64b4a38b0
  DO NOT MERGE Fix OOB read before buffer length check

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:43:29 +0000 (19:43 +0000)]

Merge changes from topic "am-a988fd47-73ee-44e9-929f-5374e8851656" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE Fix OOB read before buffer length check am: e64b4a38b0
DO NOT MERGE Fix OOB read before buffer length check

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 19:43:29 +0000 (19:43 +0000)]

Merge "DO NOT MERGE Fix OOB read before buffer length check" into nyc-dev

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 19:18:20 +0000 (19:18 +0000)]

[automerger] DO NOT MERGE Add packet length check in smp_proc_master_id am: 36bbbbf8db am: 141409e120

Change-Id: I8bd45139ee30783cc528062308fdf42d686251f3

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 19:18:18 +0000 (19:18 +0000)]

[automerger] DO NOT MERGE Add packet length check in smp_proc_master_id am: 36bbbbf8db

Change-Id: If6f2f87162f61fd58492dc5bea9485757fe0e695

commit | commitdiff | tree

Ugo Yu [Wed, 8 Aug 2018 08:18:08 +0000 (16:18 +0800)]

DO NOT MERGE Add packet length check in smp_proc_master_id

Bug: 111937027
Test: manual
Change-Id: I2009b6be38f9733931e625379b035e84371fdcaf

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 17:43:53 +0000 (17:43 +0000)]

[automerger] Checks the SMP length to fix OOB read am: 353faee793 am: 9343dda4d3

Change-Id: Ib0dd794d01ce85e30c1665b45733befa4af59dda

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 17:43:52 +0000 (17:43 +0000)]

[automerger] Checks the SMP length to fix OOB read am: 353faee793

Change-Id: I897f7f6dec710a102f8fcf0b307be6973eedf994

commit | commitdiff | tree

Cheney Ni [Wed, 8 Aug 2018 14:40:27 +0000 (22:40 +0800)]

Checks the SMP length to fix OOB read

Bug: 111937065
Test: manual
Change-Id: I330880a6e1671d0117845430db4076dfe1aba688
Merged-In: I330880a6e1671d0117845430db4076dfe1aba688

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 07:04:24 +0000 (07:04 +0000)]

[automerger] Fix copy length calculation in sdp_copy_raw_data am: 1a0571a4ac am: fc08bac226

Change-Id: I6eb912e2613ec8549f9a8a579d7440ed876fd0e7

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 10 Aug 2018 07:04:22 +0000 (07:04 +0000)]

[automerger] Fix copy length calculation in sdp_copy_raw_data am: 1a0571a4ac

Change-Id: I8334874f9f3037833a60c0b84c9fea593b7daffa

commit | commitdiff | tree

Jakub Pawlowski [Mon, 16 Jul 2018 13:40:35 +0000 (06:40 -0700)]

Fix copy length calculation in sdp_copy_raw_data

Test: compilation
Bug: 110216176
Change-Id: Ic4a19c9f0fe8cd592bc6c25dcec7b1da49ff7459
Merged-In: Ic4a19c9f0fe8cd592bc6c25dcec7b1da49ff7459

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 00:39:29 +0000 (00:39 +0000)]

Merge changes from topic "am-49bd153a-ceb2-41b6-8588-4e6a6475d94a" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp am: 082353ad14 am: 03c98acc31
  [automerger] DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp am: 082353ad14
  DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 00:39:29 +0000 (00:39 +0000)]

Merge changes from topic "am-49bd153a-ceb2-41b6-8588-4e6a6475d94a" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp am: 082353ad14
DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp

commit | commitdiff | tree

TreeHugger Robot [Fri, 10 Aug 2018 00:39:29 +0000 (00:39 +0000)]

Merge "DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp" into nyc-dev

commit | commitdiff | tree

Hansong Zhang [Thu, 9 Aug 2018 23:43:44 +0000 (23:43 +0000)]

Merge "DO NOT MERGE Check remaining frame length in rfc_process_mx_message" into nyc-dev

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 22:55:49 +0000 (22:55 +0000)]

[automerger] DO NOT MERGE Check remaining frame length in rfc_process_mx_message am: 53e8b941fd am: ab038438dc

Change-Id: I39245a2ad5f7a25817312a839dc380c65d5c6bc7

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 22:55:47 +0000 (22:55 +0000)]

[automerger] DO NOT MERGE Check remaining frame length in rfc_process_mx_message am: 53e8b941fd

Change-Id: Icf15e5062606fb69a632d136dbbb4257802bbef2

commit | commitdiff | tree

Hansong Zhang [Wed, 8 Aug 2018 18:38:30 +0000 (11:38 -0700)]

DO NOT MERGE Check remaining frame length in rfc_process_mx_message

Bug: 111936792
Bug: 80432928
Test: manual
Change-Id: Ie2c09f3d598fb230ce060c9043f5a88c241cdd79

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 20:44:20 +0000 (20:44 +0000)]

[automerger] DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback am: b78d265f36 am: 750f173103

Change-Id: I4758c0dc8b2c91707ee4941e6139a07985a65115

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 20:44:19 +0000 (20:44 +0000)]

[automerger] DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback am: b78d265f36

Change-Id: Id40969f4067b99036b17e8880e1b8c5f9602fbca

commit | commitdiff | tree

Pavlin Radoslavov [Thu, 9 Aug 2018 20:40:54 +0000 (13:40 -0700)]

DO NOT MERGE: Add missing AVRCP message length checks inside avrc_msg_cback

Explicitly check the length of the received message before
accessing the data.

Bug: 111803925
Bug: 79883824
Test: POC scripts
Change-Id: I50d1d1f7dd7038ffcd5f0d5975ab1db43178067f
Merged-In: I00b1c6bd6dd7e18ac2c469ef2032c7ff10dcaecb

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 05:31:25 +0000 (05:31 +0000)]

[automerger] DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req am: fb5115a9f8 am: 1ced84f755

Change-Id: Ie0aaf223c4a572094bdf93c09fb24fcb0b3d67e4

commit | commitdiff | tree

Android Build Merger (Role) [Thu, 9 Aug 2018 05:31:21 +0000 (05:31 +0000)]

[automerger] DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req am: fb5115a9f8

Change-Id: I5863c4cf1a923c99cc00ad5d802e88d4e08eb6dc

commit | commitdiff | tree

Cheney Ni [Tue, 7 Aug 2018 13:32:07 +0000 (21:32 +0800)]

DO NOT MERGE: Add packet length checks in mca_ccb_hdl_req

Bug: 110791536
Test: manual
Change-Id: Ica5d8037246682fdb190b2747a86ed8d44c2869a

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 8 Aug 2018 08:17:16 +0000 (08:17 +0000)]

[automerger] DO NOT MERGE Check packet length in bta_av_proc_meta_cmd am: 82815f4498 am: 1bf18942ad

Change-Id: I7e08942760476ff7a7555ae389fe2125d82058cb

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 8 Aug 2018 08:17:13 +0000 (08:17 +0000)]

[automerger] DO NOT MERGE Check packet length in bta_av_proc_meta_cmd am: 82815f4498

Change-Id: I1884a8a5b2f36debd0e1e8d2dd2a62f839d70dbb

commit | commitdiff | tree

Chienyuan [Wed, 8 Aug 2018 08:15:21 +0000 (16:15 +0800)]

DO NOT MERGE Check packet length in bta_av_proc_meta_cmd

Bug: 111893951
Test: manual
Change-Id: Ie562c393e949c275203617972d43bb005190b32b

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 8 Aug 2018 06:58:18 +0000 (06:58 +0000)]

[automerger] DO NOT MERGE Fix OOB read before buffer length check am: e64b4a38b0 am: d952a36975

Change-Id: I06022c8ab062e4422b443d49869293b777058b20

commit | commitdiff | tree

Android Build Merger (Role) [Wed, 8 Aug 2018 06:58:15 +0000 (06:58 +0000)]

[automerger] DO NOT MERGE Fix OOB read before buffer length check am: e64b4a38b0

Change-Id: Id645cb892c2bef5f985f9bc9d770617c4feb0a97

commit | commitdiff | tree

Ugo Yu [Wed, 8 Aug 2018 06:57:25 +0000 (14:57 +0800)]

DO NOT MERGE Fix OOB read before buffer length check

Bug: 111936834
Test: manual
Change-Id: I60c500651f130876934a7b80889f4e021055fe73

commit | commitdiff | tree

Android Build Merger (Role) [Mon, 6 Aug 2018 21:37:26 +0000 (21:37 +0000)]

[automerger] DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp am: 082353ad14 am: 03c98acc31

Change-Id: I6b5e1c9082af1fddaaee8944b7ae661f429c483c

commit | commitdiff | tree

Android Build Merger (Role) [Mon, 6 Aug 2018 21:37:25 +0000 (21:37 +0000)]

[automerger] DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp am: 082353ad14

Change-Id: I0ab8cc738023d77e040d3b3ffc159001f13a531e

commit | commitdiff | tree

Hansong Zhang [Mon, 6 Aug 2018 21:36:41 +0000 (14:36 -0700)]

DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp

Bug: 78526423
Test: manual
Change-Id: I0eeacc6a25b12f4b999098375d0d032cfa462a91

commit | commitdiff | tree

TreeHugger Robot [Fri, 20 Jul 2018 18:25:33 +0000 (18:25 +0000)]

Merge "DO NOT MERGE SDP: Fix the param_len recalculation" into nyc-dev

commit | commitdiff | tree

TreeHugger Robot [Fri, 20 Jul 2018 18:25:33 +0000 (18:25 +0000)]

Merge changes from topic "am-2c2c464f-fb3a-4c93-8661-57c986c3e069-nyc-dev" into nyc-mr1-dev

* changes:
  [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 51b656f12b am: d305a203ce
  [automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 51b656f12b
  DO NOT MERGE SDP: Fix the param_len recalculation

commit | commitdiff | tree

TreeHugger Robot [Fri, 20 Jul 2018 18:25:33 +0000 (18:25 +0000)]

Merge changes from topic "am-2c2c464f-fb3a-4c93-8661-57c986c3e069-nyc-dev" into nyc-dr1-dev

* changes:
[automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 51b656f12b
DO NOT MERGE SDP: Fix the param_len recalculation

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 20 Jul 2018 17:17:41 +0000 (17:17 +0000)]

[automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 51b656f12b am: d305a203ce

Change-Id: I792c9737e3ba5ac8ab173e7675ddde50383a97b8

commit | commitdiff | tree

Android Build Merger (Role) [Fri, 20 Jul 2018 17:17:40 +0000 (17:17 +0000)]

[automerger] DO NOT MERGE SDP: Fix the param_len recalculation am: 51b656f12b

Change-Id: Ic935bcfa40526b5f6dbd8714552b6420a35cf29a

commit | commitdiff | tree

Hansong Zhang [Fri, 20 Jul 2018 17:16:14 +0000 (10:16 -0700)]

DO NOT MERGE SDP: Fix the param_len recalculation

Bug: 78136869
Test: manual connection to an A2DP device
Change-Id: If32b848696180ab2fd33f514de89cb8c3d202e39

system/bt

RSS Atom

About OSDN

Find Software

Develop Software

Help