OSDN Git Service

android-x86/system-bt.git
2019-04-16 Jakub PawlowskiDO NOT MERGE Drop Bluetooth connection with weak encryp...
2019-02-19 android-build... Merge cherrypicks of [6452478, 6451642, 6451643, 645381...
2019-02-19 Hansong Zhangbtm_proc_smp_cback: Don't access p_dev_rec if freed
2019-02-19 Ugo YuDO NOT MERGE Separate SDP procedure from bonding state...
2019-02-19 Hansong Zhangprocess_l2cap_cmd: Fix OOB
2019-02-19 Hansong Zhangbtm_ble_multi_adv: Check data length in HCI interface
2019-01-16 android-build... Merge cherrypicks of [6072696, 6072074, 6072757, 607212...
2019-01-16 Stanley TngDO NOT MERGE A security fix to check buffer length...
2018-12-07 android-build... Merge cherrypicks of [5745882, 5746123, 5746124, 574612...
2018-12-07 Ugo YuAdd OOB check in avrc_pars_browse_rsp
2018-12-07 Jakub PawlowskiFix buffer overflow in btif_dm_data_copy
2018-12-07 Jakub PawlowskiFix potential usage of freed memory in btif_hl_proc_sdp...
2018-11-26 android-build... Merge cherrypicks of [5610460, 5610582, 5610249, 561025...
2018-11-26 ChienyuanDO NOT MERGE HFP: Check AT command buffer boundary...
2018-11-26 Myles WatsonDO NOT MERGE: HH: Check parameter length in bta_hh_ctrl...
2018-11-26 Myles WatsonDO NOT MERGE: SDP: Check p_end in save_attr_seq and...
2018-11-26 Myles WatsonDO NOT MERGE: MCAP: Check response length in mca_ccb_hd...
2018-11-26 Ugo YuDO NOT MERGE: Fix possible OOB when AVDT data channel...
2018-10-19 android-build... Merge cherrypicks of [5313290, 5313323, 5313343, 531341...
2018-10-19 Jakub PawlowskiFix possible OOB read
2018-10-19 Ugo YuDO NOT MERGE - Check SDU lower bound before allocate...
2018-09-11 android-build... Merge cherrypicks of [4995494, 4995495, 4995496, 499549...
2018-09-11 Pavlin RadoslavovCheck data length when parsing AVRCP vendor specific...
2018-09-11 Pavlin RadoslavovDO NOT MERGE - Check AVRCP data length when parsing...
2018-08-30 android-build... Merge cherrypicks of [4897833, 4897834, 4897835] into...
2018-08-30 Hansong ZhangFix a wrong check in rfc_parse_data
2018-08-30 Hansong ZhangAdd bound check for rfc_parse_data
2018-08-16 android-build... Merge cherrypicks of [4793902] into oc-m8-release
2018-08-16 Hansong ZhangFix build failure in stack/rfcomm/rfc_ts_frames.c
2018-08-16 android-build... Merge cherrypicks of [4787660, 4787680, 4787071, 478770...
2018-08-16 Cheney NiAdd packet length checks in mca_ccb_hdl_req
2018-08-16 Cheney NiChecks the SMP length to fix OOB read
2018-08-16 Ugo YuAdd packet length check in smp_proc_master_id
2018-08-16 Pavlin RadoslavovAdd missing AVRCP message length checks inside avrc_msg...
2018-08-16 Ugo YuDO NOT MERGE Fix OOB read before buffer length check
2018-08-16 ChienyuanCheck packet length in bta_av_proc_meta_cmd
2018-08-16 Hansong ZhangFix OOB read in avrc_ctrl_pars_vendor_rsp
2018-08-16 Hansong ZhangCheck remaining frame length in rfc_process_mx_message
2018-08-16 Jakub PawlowskiFix copy length calculation in sdp_copy_raw_data
2018-08-16 Hansong ZhangDO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av...
2018-08-03 android-build... Merge cherrypicks of [4691111, 4689862, 4690575, 469057...
2018-08-03 Hansong ZhangHID Host: Check L2CAP packet data length
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Jakub PawlowskiAdd packet length checks in l2cble_process_sig_cmd
2018-08-03 Jakub PawlowskiDon't use Address after it was deleted
2018-08-03 Hansong ZhangHFP: Fix out of bound access in phone number processing
2018-08-03 Jakub PawlowskiSDP: return error on offset bigger than atribute length
2018-08-03 Hansong ZhangHIDD: Prevent integer underflow in bta_hd_act
2018-08-03 Ajay PanickerDO NOT MERGE: Don't reuse buffer when building response
2018-08-03 Pavlin RadoslavovAdd BT_HDR length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd packet length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd checks whether the AVDTP element data length is...
2018-08-03 Jack HeBNEP: Fix OOB access in bnep_data_ind
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth causing remote...
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth bugs causing...
2018-08-03 Myles WatsonDO NOT MERGE: SDP: Recalculate param_len after max_list_len
2018-08-03 Jakub PawlowskiDecrease length after reading from array in process_ser...
2018-08-03 Hansong ZhangDO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach...
2018-08-03 Jakub PawlowskiGATT: Handle too short Error Response PDU
2018-08-03 Jakub PawlowskiAdd PDU size checks in process_service_search_attr_rsp
2018-08-03 Ajay PanickerAdd bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI...
2018-08-03 Ajay PanickerDO NOT MERGE: Check number of attributes before writing...
2018-08-03 Hansong ZhangDO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET...
2018-08-03 Hansong ZhangDO NOT MERGE Prevent stack overflow in btif_storage
2018-08-03 Jakub PawlowskiGet rid of BTM_IS_PUBLIC_BDA
2018-08-03 Andre EisenbachDO NOT MERGE SMP: Validate remote elliptic curve points
2018-08-03 Hansong ZhangDO NOT MERGE Add bounds check for BNEP_Write
2018-08-03 Hansong ZhangDO NOT MERGE Initialize local variable in gatts_process...
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Myles WatsonPAN: Always allocate in bta_pan_data_buf_ind_cback
2018-08-03 Stanley TngDO NOT MERGE Handle bad packet length in gatts_process_...
2018-08-03 Stanley TngDO NOT MERGE Drop LE CoC fragments when frame size...
2018-08-03 Hansong ZhangDO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result
2018-08-03 Hansong ZhangDO NOT MERGE Fix unexpected behavior in smp_sm_event
2018-03-21 android-build... Snap for 4657601 from 6bde1f2e5c1700370fe98eba5e7b00b13...
2018-03-15 android-build... Snap for 4603989 from cf98916401833f40c3aa5bf42dee57715...
2018-02-26 android-build... Merge cherrypicks of [3661626, 3661980, 3662429, 366154...
2018-02-26 Ajay PanickerAVRCP: Check number of text attribute values in response
2018-02-26 Ajay PanickerAVRCP: Set maximum string length when copying to buffer
2018-02-26 Ajay PanickerAVRCP: Initialize buffer for attribute values to be...
2018-02-26 Ajay PanickerAVRCP: Check number of text attributes in response
2018-02-26 Hansong ZhangDO NOT MERGE Truncate new line characters when adding...
2018-02-26 Ajay PanickerAVRCP: Check the number of text value attributes requested
2018-02-26 Myles WatsonSDP: Check p_req_end before reading from p_req
2018-02-26 android-build... Snap for 4565141 from 83c8be063854a84843042a2089f63e777...
2018-02-14 android-build... Merge cherrypicks of [3614756, 3614757, 3614861, 361475...
2018-02-14 Ajay PanickerAVRCP: Check number of text attribute values in response
2018-02-14 Ajay PanickerAVRCP: Set maximum string length when copying to buffer
2018-02-14 Ajay PanickerAVRCP: Initialize buffer for attribute values to be...
2018-02-14 Ajay PanickerAVRCP: Check number of text attributes in response
2018-02-14 Hansong ZhangDO NOT MERGE Truncate new line characters when adding...
2018-02-14 Ajay PanickerAVRCP: Check the number of text value attributes requested
2018-02-08 android-build... Merge cherrypicks of [3581037, 3581038, 3580473, 358062...
2018-02-08 Myles WatsonSDP: Check p_req_end before reading from p_req
2018-01-18 android-build... Merge cherrypicks of [3478238, 3478653, 3478239, 347858...
2018-01-18 Myles WatsonSDP: Include the offset in sdp_disc_server_rsp
2018-01-18 Ajay PanickerAVRCP: Check the number of text attributes requested
2018-01-18 Stanley TngRemove memory reference to invalid mem in error log
2018-01-18 Myles WatsonBNEP: Check received frame type
2018-01-18 Myles WatsonPAN: Fix Use-after-free in bta_pan_data_buf_ind_cback
next