- 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
- 5bfd817 Fix UAF in ~CallbackEnv by Brian Delwiche · 1 year, 5 months ago
- 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
- a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
- ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
- 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
- 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
- a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
- f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
- 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
- 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
- 9d74d4c Merge cherrypicks of ['googleplex-android-review.googlesource.com/23252652'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
- c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
- 48779ff Merge cherrypicks of ['googleplex-android-review.googlesource.com/24131190'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
- 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
- 4209fc3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22900658', 'googleplex-android-review.googlesource.com/23152794', 'googleplex-android-review.googlesource.com/23152778', 'googleplex-android-review.googlesource.com/22726306', 'googleplex-android-review.googlesource.com/21609715', 'googleplex-android-review.googlesource.com/22581496'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
- d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
- b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
- 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
- 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
- d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
- 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
- bb6c888 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22316109'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
- ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
- 2d15008 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22343125', 'googleplex-android-review.googlesource.com/22188831'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 9 months ago
- bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
- 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
- b900cad Merge cherrypicks of ['googleplex-android-review.googlesource.com/20657353', 'googleplex-android-review.googlesource.com/20606225', 'googleplex-android-review.googlesource.com/20617177', 'googleplex-android-review.googlesource.com/20617178', 'googleplex-android-review.googlesource.com/20995769'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 11 months ago
- 7e5f891 Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
- d44034f Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
- d24a07f Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
- 6a2e3c8 Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
- 75e6645 Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
- 986839b Merge cherrypicks of ['ag/20810842', 'ag/20657355', 'ag/20810318', 'ag/20813130'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years ago
- 1e27ef6 Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
- 8d608f6 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
- b6f74ca Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
- b77b03e Merge cherrypicks of ['ag/20416689', 'ag/20611095', 'ag/20068633'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 1 month ago
- 4d51a09 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
- 0c19bbd Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
- 2fdc7b6 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
- 4c8b771 Merge cherrypicks of [19500904, 19747499, 19747692, 19680038, 19698796, 20077612, 19943187, 19956048, 20058355, 20105077] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 3 months ago
- bb8740e Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
- 0bb80e1 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
- dc463a9 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
- ade8d7f Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
- 331b9de Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
- 8fffa0c Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 4 months ago
- e5899fa Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 4 months ago
- 8d867aa Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
- 41f6353 Added max buffer length check by Brian Delwiche · 2 years, 4 months ago
- 15a5c65 Add length check when copy AVDTP packet by Ted Wang · 2 years, 5 months ago
- c8d1ac8 Merge cherrypicks of [19625563, 19595932, 19612675] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 4 months ago
- a955d3b Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago
- 0dc8782 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
- 30178c6 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
- ef40e7e Merge cherrypicks of [19588293, 19600909] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
- 2d6ac9f Merge cherrypicks of [17530926, 19500904] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
- c26dc0b Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 2 years, 5 months ago
- ba29753 Reconfigure Address policy on last bond removed by Rahul Sabnis · 2 years, 5 months ago
- 9f563b2 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 9 months ago
- 4994089 Merge cherrypicks of [19203172] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- cea8f23 Added platform_compat_config to enable target sdk check by Etienne Ruffieux · 2 years, 6 months ago
- 5fc8a1d Merge cherrypicks of [19132091] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- dddf115 Do resolving list operations via handler by Chienyuan · 2 years, 6 months ago
- c97cda9 Merge cherrypicks of [19129326, 19129327] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- ce74739 BassClient: Force PA sync reset before removing source by xiaowang · 2 years, 6 months ago
- 02be37d BassClient: Fix issue that source could not be found by xiaowang · 2 years, 6 months ago
- bdb818e Merge cherrypicks of [19120567, 19120540, 19120541, 19120542, 19129144, 19129145] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- 04b2b91 Revert "BassClient: Fix issue that source could not be found" by xiaowang · 2 years, 6 months ago
- 39b9602 Revert "BassClient: Force PA sync reset before removing source" by xiaowang · 2 years, 6 months ago
- 37f24e5 Revert "Revert "Immediately execute instead of queueing request ..." by Rahul Sabnis · 2 years, 6 months ago
- a526982 Revert "Revert "Make SDP and inquiry request dequeue and execute..." by Rahul Sabnis · 2 years, 6 months ago
- dd8e4ca Revert^2 "Queue discovery and device inquiry while bonding" by Rahul Sabnis · 2 years, 6 months ago
- 0ebbe9d Catch IAE in BluetoothManagerService by Sungsoo Lim · 2 years, 6 months ago
- 1eb3558 Merge cherrypicks of [19093297, 19123578] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- 856f6ac Revert "Revert "Reuse SynchronousResultReceivers instead of creating new."" by Neha Jain · 2 years, 6 months ago
- 4c024a2 Revert "leaudio: Make LE Connection Interval a multiple of SDU_Interval" by Jack He · 2 years, 6 months ago
- 94ea60d Merge cherrypicks of [19114242] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- dd85e91 Revert "Reuse SynchronousResultReceivers instead of creating new." by Neha Jain · 2 years, 6 months ago
- f8b9ffa Merge cherrypicks of [19039092, 19068701, 19032880] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- 655653f GATT: Disable notifications when disconnecting by Jakub Pawlowski · 2 years, 6 months ago
- 67952a5 gatt: Fix incorrect write to the descriptor. by Łukasz Rymanowski · 2 years, 6 months ago
- 5467b90 Reuse SynchronousResultReceivers instead of creating new. by Etienne Ruffieux · 2 years, 6 months ago
- 5862dee Merge cherrypicks of [19038673] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- 13a625e Move user file along to the new package name by William Escande · 2 years, 7 months ago
- 68d0d2e Snap for 8762204 from e880d2196e06e8d2704c596c375d0938190aa437 to tm-release by Android Build Coastguard Worker · 2 years, 6 months ago
- e880d21 Merge "HAL: Avoid FATAL log on expected transaction status" into tm-dev by Zach Johnson · 2 years, 6 months ago
- 8f603bd Merge "Change Bluetooth apex mountpoint" into tm-dev by TreeHugger Robot · 2 years, 6 months ago
- 3e4c27d Always create connection when hci status SUCCESS by Chris Manton · 2 years, 6 months ago
- 287e72f Merge "Prevent IAE caused by empty media ids" into tm-dev by TreeHugger Robot · 2 years, 6 months ago
- 43a5816 Merge "Fix flakiness in LeAdvancedScanningTest lost test" into tm-dev by Christine Hallstrom · 2 years, 6 months ago
- d72af4a Fix flakiness in LeAdvancedScanningTest lost test by Christine Hallstrom · 2 years, 6 months ago
- 619aba9 Snap for 8756258 from 288cc620d28fc704a988aecdef9aca411cef7cdc to tm-release by Android Build Coastguard Worker · 2 years, 6 months ago
- 0ea3c8a Prevent IAE caused by empty media ids by Sungsoo Lim · 2 years, 6 months ago
- 8e1ae01 Change Bluetooth apex mountpoint by William Escande · 2 years, 6 months ago
- fa4d1e3 Move version in apex_manifest by William Escande · 2 years, 6 months ago
- 288cc62 Merge "Rename Bluetooth apex and APK" into tm-dev by Oriol Prieto Gascó · 2 years, 6 months ago
- c7f0453 HAL: Avoid FATAL log on expected transaction status by Josh Wu · 2 years, 7 months ago
- 95e5f0a Merge "Handle empty battery level" into tm-dev by Kyunglyul Hyun · 2 years, 6 months ago