2018-12-07 |
Jakub Pawlowski | Fix potential usage of freed memory in btif_hl_proc_sdp... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
android-build... | Merge cherrypicks of [5610460, 5610582, 5610249, 561025... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
Chienyuan | DO NOT MERGE HFP: Check AT command buffer boundary... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
Myles Watson | DO NOT MERGE: HH: Check parameter length in bta_hh_ctrl... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
Myles Watson | DO NOT MERGE: SDP: Check p_end in save_attr_seq and... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
Myles Watson | DO NOT MERGE: MCAP: Check response length in mca_ccb_hd... |
commit | commitdiff | tree | snapshot |
2018-11-26 |
Ugo Yu | DO NOT MERGE: Fix possible OOB when AVDT data channel... |
commit | commitdiff | tree | snapshot |
2018-10-19 |
android-build... | Merge cherrypicks of [5313290, 5313323, 5313343, 531341... |
commit | commitdiff | tree | snapshot |
2018-10-19 |
Jakub Pawlowski | Fix possible OOB read |
commit | commitdiff | tree | snapshot |
2018-10-19 |
Ugo Yu | DO NOT MERGE - Check SDU lower bound before allocate... |
commit | commitdiff | tree | snapshot |
2018-09-11 |
android-build... | Merge cherrypicks of [4995494, 4995495, 4995496, 499549... |
commit | commitdiff | tree | snapshot |
2018-09-11 |
Pavlin Radoslavov | Check data length when parsing AVRCP vendor specific... |
commit | commitdiff | tree | snapshot |
2018-09-11 |
Pavlin Radoslavov | DO NOT MERGE - Check AVRCP data length when parsing... |
commit | commitdiff | tree | snapshot |
2018-08-30 |
android-build... | Merge cherrypicks of [4897833, 4897834, 4897835] into... |
commit | commitdiff | tree | snapshot |
2018-08-30 |
Hansong Zhang | Fix a wrong check in rfc_parse_data |
commit | commitdiff | tree | snapshot |
2018-08-30 |
Hansong Zhang | Add bound check for rfc_parse_data |
commit | commitdiff | tree | snapshot |
2018-08-16 |
android-build... | Merge cherrypicks of [4793902] into oc-m8-release |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Hansong Zhang | Fix build failure in stack/rfcomm/rfc_ts_frames.c |
commit | commitdiff | tree | snapshot |
2018-08-16 |
android-build... | Merge cherrypicks of [4787660, 4787680, 4787071, 478770... |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Cheney Ni | Add packet length checks in mca_ccb_hdl_req |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Cheney Ni | Checks the SMP length to fix OOB read |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Ugo Yu | Add packet length check in smp_proc_master_id |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Pavlin Radoslavov | Add missing AVRCP message length checks inside avrc_msg... |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Ugo Yu | DO NOT MERGE Fix OOB read before buffer length check |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Chienyuan | Check packet length in bta_av_proc_meta_cmd |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Hansong Zhang | Fix OOB read in avrc_ctrl_pars_vendor_rsp |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Hansong Zhang | Check remaining frame length in rfc_process_mx_message |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Jakub Pawlowski | Fix copy length calculation in sdp_copy_raw_data |
commit | commitdiff | tree | snapshot |
2018-08-16 |
Hansong Zhang | DO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
android-build... | Merge cherrypicks of [4691111, 4689862, 4690575, 469057... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | HID Host: Check L2CAP packet data length |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Fix OOB read in process_l2cap_cmd |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | Add packet length checks in l2cble_process_sig_cmd |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | Don't use Address after it was deleted |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | HFP: Fix out of bound access in phone number processing |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | SDP: return error on offset bigger than atribute length |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | HIDD: Prevent integer underflow in bta_hd_act |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Ajay Panicker | DO NOT MERGE: Don't reuse buffer when building response |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Pavlin Radoslavov | Add BT_HDR length check for received AVCTP packets |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Pavlin Radoslavov | Add packet length check for received AVCTP packets |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Pavlin Radoslavov | Add checks whether the AVDTP element data length is... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jack He | BNEP: Fix OOB access in bnep_data_ind |
commit | commitdiff | tree | snapshot |
2018-08-03 |
akirilov | RESTRICT AUTOMERGE: Fixes two bluetooth causing remote... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
akirilov | RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Myles Watson | DO NOT MERGE: SDP: Recalculate param_len after max_list_len |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | Decrease length after reading from array in process_ser... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | GATT: Handle too short Error Response PDU |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | Add PDU size checks in process_service_search_attr_rsp |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Ajay Panicker | Add bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Ajay Panicker | DO NOT MERGE: Check number of attributes before writing... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Prevent stack overflow in btif_storage |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Jakub Pawlowski | Get rid of BTM_IS_PUBLIC_BDA |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Andre Eisenbach | DO NOT MERGE SMP: Validate remote elliptic curve points |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Add bounds check for BNEP_Write |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Initialize local variable in gatts_process... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Fix OOB read in process_l2cap_cmd |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Myles Watson | PAN: Always allocate in bta_pan_data_buf_ind_cback |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Stanley Tng | DO NOT MERGE Handle bad packet length in gatts_process_... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Stanley Tng | DO NOT MERGE Drop LE CoC fragments when frame size... |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result |
commit | commitdiff | tree | snapshot |
2018-08-03 |
Hansong Zhang | DO NOT MERGE Fix unexpected behavior in smp_sm_event |
commit | commitdiff | tree | snapshot |
2018-03-21 |
android-build... | Snap for 4657601 from 6bde1f2e5c1700370fe98eba5e7b00b13... |
commit | commitdiff | tree | snapshot |
2018-03-15 |
android-build... | Snap for 4603989 from cf98916401833f40c3aa5bf42dee57715... |
commit | commitdiff | tree | snapshot |
2018-02-26 |
android-build... | Merge cherrypicks of [3661626, 3661980, 3662429, 366154... |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Ajay Panicker | AVRCP: Check number of text attribute values in response |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Ajay Panicker | AVRCP: Set maximum string length when copying to buffer |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Ajay Panicker | AVRCP: Initialize buffer for attribute values to be... |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Ajay Panicker | AVRCP: Check number of text attributes in response |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Hansong Zhang | DO NOT MERGE Truncate new line characters when adding... |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Ajay Panicker | AVRCP: Check the number of text value attributes requested |
commit | commitdiff | tree | snapshot |
2018-02-26 |
Myles Watson | SDP: Check p_req_end before reading from p_req |
commit | commitdiff | tree | snapshot |
2018-02-26 |
android-build... | Snap for 4565141 from 83c8be063854a84843042a2089f63e777... |
commit | commitdiff | tree | snapshot |
2018-02-14 |
android-build... | Merge cherrypicks of [3614756, 3614757, 3614861, 361475... |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Ajay Panicker | AVRCP: Check number of text attribute values in response |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Ajay Panicker | AVRCP: Set maximum string length when copying to buffer |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Ajay Panicker | AVRCP: Initialize buffer for attribute values to be... |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Ajay Panicker | AVRCP: Check number of text attributes in response |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Hansong Zhang | DO NOT MERGE Truncate new line characters when adding... |
commit | commitdiff | tree | snapshot |
2018-02-14 |
Ajay Panicker | AVRCP: Check the number of text value attributes requested |
commit | commitdiff | tree | snapshot |
2018-02-08 |
android-build... | Merge cherrypicks of [3581037, 3581038, 3580473, 358062... |
commit | commitdiff | tree | snapshot |
2018-02-08 |
Myles Watson | SDP: Check p_req_end before reading from p_req |
commit | commitdiff | tree | snapshot |
2018-01-18 |
android-build... | Merge cherrypicks of [3478238, 3478653, 3478239, 347858... |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | SDP: Include the offset in sdp_disc_server_rsp |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Ajay Panicker | AVRCP: Check the number of text attributes requested |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Stanley Tng | Remove memory reference to invalid mem in error log |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | BNEP: Check received frame type |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Hansong Zhang | Fix unexpected behavior in reading BNEP packets |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Hansong Zhang | Fix unexpected behavior in SDP |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Pavlin Radoslavov | Allocate/free the SDP connection timers only during... |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | SDP: Pass the bounds to process_service_*_rsp |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Pavlin Radoslavov | Removed alarm callback execution statistics |
commit | commitdiff | tree | snapshot |
2018-01-18 |
android-build... | Merge cherrypicks of [3478311, 3478390, 3478133, 347817... |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | SDP: Include the offset in sdp_disc_server_rsp |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Ajay Panicker | AVRCP: Check the number of text attributes requested |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Stanley Tng | Remove memory reference to invalid mem in error log |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | BNEP: Check received frame type |
commit | commitdiff | tree | snapshot |
2018-01-18 |
Myles Watson | PAN: Fix Use-after-free in bta_pan_data_buf_ind_cback |
commit | commitdiff | tree | snapshot |
next |