OSDN Git Service

android-x86/system-bt.git
2019-01-08 Chih-Wei HuangMerge tag 'android-8.1.0_r60' into oreo-x86 android-x86-8.1-r1
2018-12-21 Chih-Wei HuangMerge tag 'android-8.1.0_r53' into oreo-x86
2018-11-26 android-build... Merge cherrypicks of [5610460, 5610582, 5610249, 561025...
2018-11-26 ChienyuanDO NOT MERGE HFP: Check AT command buffer boundary...
2018-11-26 Myles WatsonDO NOT MERGE: HH: Check parameter length in bta_hh_ctrl...
2018-11-26 Myles WatsonDO NOT MERGE: SDP: Check p_end in save_attr_seq and...
2018-11-26 Myles WatsonDO NOT MERGE: MCAP: Check response length in mca_ccb_hd...
2018-11-26 Ugo YuDO NOT MERGE: Fix possible OOB when AVDT data channel...
2018-10-19 android-build... Merge cherrypicks of [5313290, 5313323, 5313343, 531341...
2018-10-19 Jakub PawlowskiFix possible OOB read
2018-10-19 Ugo YuDO NOT MERGE - Check SDU lower bound before allocate...
2018-10-09 Chih-Wei HuangMerge tag 'android-8.1.0_r48' into oreo-x86
2018-09-11 android-build... Merge cherrypicks of [4995494, 4995495, 4995496, 499549...
2018-09-11 Pavlin RadoslavovCheck data length when parsing AVRCP vendor specific...
2018-09-11 Pavlin RadoslavovDO NOT MERGE - Check AVRCP data length when parsing...
2018-09-10 Chih-Wei HuangMerge tag 'android-8.1.0_r46' into oreo-x86
2018-08-30 android-build... Merge cherrypicks of [4897833, 4897834, 4897835] into...
2018-08-30 Hansong ZhangFix a wrong check in rfc_parse_data
2018-08-30 Hansong ZhangAdd bound check for rfc_parse_data
2018-08-16 android-build... Merge cherrypicks of [4793902] into oc-m8-release
2018-08-16 Hansong ZhangFix build failure in stack/rfcomm/rfc_ts_frames.c
2018-08-16 android-build... Merge cherrypicks of [4787660, 4787680, 4787071, 478770...
2018-08-16 Cheney NiAdd packet length checks in mca_ccb_hdl_req
2018-08-16 Cheney NiChecks the SMP length to fix OOB read
2018-08-16 Ugo YuAdd packet length check in smp_proc_master_id
2018-08-16 Pavlin RadoslavovAdd missing AVRCP message length checks inside avrc_msg...
2018-08-16 Ugo YuDO NOT MERGE Fix OOB read before buffer length check
2018-08-16 ChienyuanCheck packet length in bta_av_proc_meta_cmd
2018-08-16 Hansong ZhangFix OOB read in avrc_ctrl_pars_vendor_rsp
2018-08-16 Hansong ZhangCheck remaining frame length in rfc_process_mx_message
2018-08-16 Jakub PawlowskiFix copy length calculation in sdp_copy_raw_data
2018-08-16 Hansong ZhangDO NOT MERGE AVRC: Copy browse.p_browse_data in btif_av...
2018-08-10 android-build... Merge cherrypicks of [4741663, 4741664, 4741665, 474166...
2018-08-10 Hansong ZhangHID Host: Check L2CAP packet data length
2018-08-10 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-10 Jakub PawlowskiAdd packet length checks in l2cble_process_sig_cmd
2018-08-10 Jakub PawlowskiDon't use Address after it was deleted
2018-08-10 Hansong ZhangHFP: Fix out of bound access in phone number processing
2018-08-10 Jakub PawlowskiSDP: return error on offset bigger than atribute length
2018-08-10 Hansong ZhangHIDD: Prevent integer underflow in bta_hd_act
2018-08-10 Ajay PanickerDO NOT MERGE: Don't reuse buffer when building response
2018-08-10 Pavlin RadoslavovAdd BT_HDR length check for received AVCTP packets
2018-08-10 Pavlin RadoslavovAdd packet length check for received AVCTP packets
2018-08-10 Pavlin RadoslavovAdd checks whether the AVDTP element data length is...
2018-08-10 Jack HeBNEP: Fix OOB access in bnep_data_ind
2018-08-10 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth causing remote...
2018-08-10 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth bugs causing...
2018-08-10 Myles WatsonDO NOT MERGE: SDP: Recalculate param_len after max_list_len
2018-08-10 Jakub PawlowskiDecrease length after reading from array in process_ser...
2018-08-10 Hansong ZhangDO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach...
2018-08-10 Jakub PawlowskiGATT: Handle too short Error Response PDU
2018-08-10 Jakub PawlowskiAdd PDU size checks in process_service_search_attr_rsp
2018-08-10 Ajay PanickerAdd bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI...
2018-08-10 Ajay PanickerDO NOT MERGE: Check number of attributes before writing...
2018-08-10 Hansong ZhangDO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET...
2018-08-10 Hansong ZhangDO NOT MERGE Prevent stack overflow in btif_storage
2018-08-10 Andre EisenbachDO NOT MERGE SMP: Validate remote elliptic curve points
2018-08-10 Hansong ZhangDO NOT MERGE Add bounds check for BNEP_Write
2018-08-10 Hansong ZhangDO NOT MERGE Initialize local variable in gatts_process...
2018-08-10 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-10 Myles WatsonPAN: Always allocate in bta_pan_data_buf_ind_cback
2018-08-10 Stanley TngDO NOT MERGE Handle bad packet length in gatts_process_...
2018-08-10 Stanley TngDO NOT MERGE Drop LE CoC fragments when frame size...
2018-08-10 Hansong ZhangDO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result
2018-08-10 Hansong ZhangDO NOT MERGE Fix unexpected behavior in smp_sm_event
2018-08-03 android-build... Merge cherrypicks of [4691111, 4689862, 4690575, 469057...
2018-08-03 Hansong ZhangHID Host: Check L2CAP packet data length
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Jakub PawlowskiAdd packet length checks in l2cble_process_sig_cmd
2018-08-03 Jakub PawlowskiDon't use Address after it was deleted
2018-08-03 Hansong ZhangHFP: Fix out of bound access in phone number processing
2018-08-03 Jakub PawlowskiSDP: return error on offset bigger than atribute length
2018-08-03 Hansong ZhangHIDD: Prevent integer underflow in bta_hd_act
2018-08-03 Ajay PanickerDO NOT MERGE: Don't reuse buffer when building response
2018-08-03 Pavlin RadoslavovAdd BT_HDR length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd packet length check for received AVCTP packets
2018-08-03 Pavlin RadoslavovAdd checks whether the AVDTP element data length is...
2018-08-03 Jack HeBNEP: Fix OOB access in bnep_data_ind
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth causing remote...
2018-08-03 akirilovRESTRICT AUTOMERGE: Fixes two bluetooth bugs causing...
2018-08-03 Myles WatsonDO NOT MERGE: SDP: Recalculate param_len after max_list_len
2018-08-03 Jakub PawlowskiDecrease length after reading from array in process_ser...
2018-08-03 Hansong ZhangDO NOT MERGE SMP: Check p_cb->role in smp_br_state_mach...
2018-08-03 Jakub PawlowskiGATT: Handle too short Error Response PDU
2018-08-03 Jakub PawlowskiAdd PDU size checks in process_service_search_attr_rsp
2018-08-03 Ajay PanickerAdd bounds check to l2cble_process_sig_cmd L2CAP_CMD_DI...
2018-08-03 Ajay PanickerDO NOT MERGE: Check number of attributes before writing...
2018-08-03 Hansong ZhangDO NOT MERGE AVRC: Add bound check for AVRC_EVT_APP_SET...
2018-08-03 Hansong ZhangDO NOT MERGE Prevent stack overflow in btif_storage
2018-08-03 Jakub PawlowskiGet rid of BTM_IS_PUBLIC_BDA
2018-08-03 Andre EisenbachDO NOT MERGE SMP: Validate remote elliptic curve points
2018-08-03 Hansong ZhangDO NOT MERGE Add bounds check for BNEP_Write
2018-08-03 Hansong ZhangDO NOT MERGE Initialize local variable in gatts_process...
2018-08-03 Hansong ZhangDO NOT MERGE Fix OOB read in process_l2cap_cmd
2018-08-03 Myles WatsonPAN: Always allocate in bta_pan_data_buf_ind_cback
2018-08-03 Stanley TngDO NOT MERGE Handle bad packet length in gatts_process_...
2018-08-03 Stanley TngDO NOT MERGE Drop LE CoC fragments when frame size...
2018-08-03 Hansong ZhangDO NOT MERGE Fix unexpected behavior in bta_dm_sdp_result
2018-08-03 Hansong ZhangDO NOT MERGE Fix unexpected behavior in smp_sm_event
2018-07-13 Chih-Wei HuangMerge tag 'android-8.1.0_r41' into oreo-x86
next