OSDN Git Service

android-x86/system-bt.git
2020-12-20 Chen ChenCheck Classic key before cross-key derivation
2020-11-06 Rahul SabnisSend a response to an smp security request depending...
2020-11-06 Rahul SabnisCheck whether local device is an ATV device to determin...
2020-11-06 Rahul SabnisShows a consent dialog on the local device when pairing...
2020-11-06 li-wei.chengReturn after removing sample LTK device
2020-10-06 weichinwengFix possible OOB when receive gatt read type response...
2020-09-10 Myles WatsonDO NOT MERGE: Remove pairing on incoming bond request
2020-09-10 Joseph PirozzoEnable bitpool sanity checks
2020-05-06 Jakub PawlowskiFix potential stack overflow caused by integer overflow
2020-05-06 Hansong ZhangGattServcer: Check invalid offset
2020-02-05 Zongheng WangSDP: add return after SDP disconnection
2020-02-05 Ted WangFix potential OOB write in btm_read_remote_ext_features...
2020-02-05 Venkata Jagadeesh... GAP: Correct the continuous pkt length in l2cap
2020-01-07 Nick Desaulniersfix -Wdangling-gsl
2019-12-03 Martin BrabhamJustWorks: Auto-accept only incoming temporary pairing.
2019-12-03 Zongheng WangSDP: Disconnect when there is a bad length
2019-12-03 Rahul SabnisUse memcpy instead of casting to convert device_class...
2019-12-03 Zongheng WangSDP: disconnect if sdp_copy_raw_data fails
2019-12-03 Martin BrabhamDO NOT MERGE: btif: require pairing dialog for JustWork...
2019-11-05 Ugo YuDO NOT MERGE Store BLE keys using the address from...
2019-08-07 Jakub PawlowskiDO NOT MERGE Fix for Bluetooth connection being dropped...
2019-08-07 Jakub PawlowskiDO NOT MERGE Send HCI Read Encryption Key properly
2019-08-07 Jakub PawlowskiDO NOT MERGE Drop Bluetooth connection with weak encryp...
2019-07-03 Ted WangFix potential OOB read in sdpu_get_len_from_type
2019-06-06 Jakub PawlowskiDO NOT MERGE Don't persist bonds using sample LTK
2019-04-04 Hansong Zhangbtm_proc_smp_cback: Don't access p_dev_rec if freed
2019-04-04 Hansong Zhangprocess_l2cap_cmd: Fix OOB
2019-03-05 Stanley TngDO NOT MERGE A security fix to check buffer length...
2019-02-21 Jakub PawlowskiFix potential usage of freed memory in btif_hl_proc_sdp...
2019-02-21 Jakub PawlowskiFix buffer overflow in btif_dm_data_copy
2019-02-07 Ugo YuFix possible OOB when AVDT data channel recive ACL...
2019-01-18 Myles WatsonMCAP: Check response length in mca_ccb_hdl_rsp
2019-01-18 Myles WatsonHH: Check parameter length in bta_hh_ctrl_dat_act
2019-01-18 Myles WatsonSDP: Check p_end in save_attr_seq and add_attr
2019-01-18 ChienyuanHFP: Check AT command buffer boundary during parsing
2018-12-04 Jakub PawlowskiFix possible OOB read
2018-12-04 Ugo YuDO NOT MERGE - Check SDU lower bound before allocate...
2018-11-12 Pavlin RadoslavovCheck data length when parsing AVRCP vendor specific...
2018-11-12 Marie JanssenAVRCP: unify Get{Element,Item}Attributes response.
2018-11-07 Pavlin RadoslavovCheck AVRCP data length when parsing inside avrc_ctrl_p...
2018-10-08 Cheney NiChecks the SMP length to fix OOB read
2018-10-08 Ugo YuAdd packet length check in smp_proc_master_id
2018-10-08 Ugo YuDO NOT MERGE Fix OOB read before buffer length check
2018-10-08 ChienyuanCheck packet length in bta_av_proc_meta_cmd
2018-10-08 Pavlin RadoslavovAdd missing AVRCP message length checks inside avrc_msg...
2018-10-08 Cheney NiAdd packet length checks in mca_ccb_hdl_req
2018-10-08 Hansong ZhangFix a wrong check in rfc_parse_data
2018-10-08 Hansong ZhangAdd bound check for rfc_parse_data
2018-10-08 Hansong ZhangCheck remaining frame length in rfc_process_mx_message
2018-10-08 Jakub PawlowskiFix copy length calculation in sdp_copy_raw_data
2018-10-08 Hansong ZhangFix OOB read in avrc_ctrl_pars_vendor_rsp
2018-09-23 Jack HeDO NOT MERGE HFP: Fix out of bound access in phone...
2018-09-23 Jakub PawlowskiDon't use Address after it was deleted
2018-09-23 Hansong ZhangHID Host: Check L2CAP packet data length
2018-09-23 Jakub PawlowskiAdd packet length checks in l2cble_process_sig_cmd
2018-09-23 Hansong ZhangFix OOB read in process_l2cap_cmd
2018-09-08 Myles WatsonDO NOT MERGE: SDP: Recalculate param_len after max_list_len
2018-09-08 Jakub PawlowskiSDP: return error on offset bigger than atribute length
2018-08-17 syphyrGATT: Use correct logging macro replacement
2018-08-08 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth bugs causing...
2018-08-08 Jakub PawlowskiAdd PDU size checks in process_service_search_attr_rsp
2018-08-08 Jakub PawlowskiGATT: Handle too short Error Response PDU
2018-08-08 Pavlin RadoslavovAdd checks whether the AVDTP element data length is...
2018-08-08 Jack HeBNEP: Fix OOB access in bnep_data_ind
2018-08-08 Jakub PawlowskiDecrease length after reading from array in process_ser...
2018-08-08 Hansong ZhangDO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach...
2018-07-27 Andre EisenbachDO NOT MERGE SMP: Validate remote elliptic curve points
2018-07-16 Hansong ZhangDO NOT MERGE Prevent stack overflow in btif_storage
2018-07-16 Ajay PanickerDO NOT MERGE: Check number of attributes before writing...
2018-07-16 Hansong ZhangDO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET...
2018-07-16 Ajay PanickerAdd bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI...
2018-07-16 Hansong ZhangDO NOT MERGE Fix unexpected behavior in smp_sm_event
2018-06-08 Stanley TngDO NOT MERGE Drop LE CoC fragments when frame size...
2018-06-07 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-06-07 Stanley Tng[Backport] DO NOT MERGE Handle bad packet length in...
2018-06-07 Hansong ZhangDO NOT MERGE Add bounds check for BNEP_Write
2018-06-07 Myles WatsonPAN: Always allocate in bta_pan_data_buf_ind_cback
2018-06-07 Hansong ZhangDO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result
2018-04-08 Ajay PanickerAVRCP: Initialize buffer for attribute values to be...
2018-04-08 Myles WatsonSDP: Check p_req_end before reading from p_req
2018-04-08 Hansong ZhangDO NOT MERGE Truncate new line characters when adding...
2018-04-07 Ajay PanickerAVRCP: Check the number of text value attributes requested
2018-04-07 Ajay PanickerAVRCP: Check number of text attribute values in response
2018-04-07 Ajay PanickerAVRCP: Check number of text attributes in response
2018-04-03 Eric Meddaughbt: Fix 32k sbc_codec.sampling_rate
2018-03-08 Myles WatsonBNEP: Check received frame type
2018-03-08 Stanley TngRemove memory reference to invalid mem in error log
2018-03-08 Myles WatsonSDP: Include the offset in sdp_disc_server_rsp
2018-03-08 Myles WatsonSDP: Pass the bounds to process_service_*_rsp
2018-03-08 Hansong ZhangFix unexpected behavior in reading BNEP packets
2018-03-08 Myles WatsonPAN: Fix Use-after-free in bta_pan_data_buf_ind_cback
2018-03-08 Ajay PanickerAVRCP: Check the number of text attributes requested
2018-03-08 Pavlin RadoslavovAllocate/free the SDP connection timers only during...
2018-03-08 Pavlin RadoslavovRemoved alarm callback execution statistics
2018-03-08 Hansong ZhangFix unexpected behavior in SDP
2017-12-06 Scott BauerRead the correct amount of attributes
2017-11-17 Andre EisenbachSDP: Bounds check 'id' parameter for free_sdp_slot()
2017-10-06 Dan PasanenFix allocating buffers of the right size when BT_HDR...
2017-09-14 Pavlin RadoslavovAdd missing extension length check while parsing BNEP...
2017-09-14 Pavlin RadoslavovFree p_pending_data from tBNEP_CONN to avoid potential...
next