1. 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
  2. 5bfd817 Fix UAF in ~CallbackEnv by Brian Delwiche · 1 year, 5 months ago
  3. 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
  4. a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
  5. ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
  6. 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
  7. 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
  8. a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
  9. f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
  10. 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
  11. 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
  12. 9d74d4c Merge cherrypicks of ['googleplex-android-review.googlesource.com/23252652'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  13. c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
  14. 48779ff Merge cherrypicks of ['googleplex-android-review.googlesource.com/24131190'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  15. 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
  16. 4209fc3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22900658', 'googleplex-android-review.googlesource.com/23152794', 'googleplex-android-review.googlesource.com/23152778', 'googleplex-android-review.googlesource.com/22726306', 'googleplex-android-review.googlesource.com/21609715', 'googleplex-android-review.googlesource.com/22581496'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
  17. d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  18. b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  19. 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  20. 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  21. d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  22. 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
  23. bb6c888 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22316109'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
  24. ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  25. 2d15008 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22343125', 'googleplex-android-review.googlesource.com/22188831'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 9 months ago
  26. bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  27. 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  28. b900cad Merge cherrypicks of ['googleplex-android-review.googlesource.com/20657353', 'googleplex-android-review.googlesource.com/20606225', 'googleplex-android-review.googlesource.com/20617177', 'googleplex-android-review.googlesource.com/20617178', 'googleplex-android-review.googlesource.com/20995769'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 11 months ago
  29. 7e5f891 Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
  30. d44034f Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
  31. d24a07f Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
  32. 6a2e3c8 Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
  33. 75e6645 Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
  34. 986839b Merge cherrypicks of ['ag/20810842', 'ag/20657355', 'ag/20810318', 'ag/20813130'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years ago
  35. 1e27ef6 Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
  36. 8d608f6 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
  37. b6f74ca Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
  38. b77b03e Merge cherrypicks of ['ag/20416689', 'ag/20611095', 'ag/20068633'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 1 month ago
  39. 4d51a09 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
  40. 0c19bbd Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
  41. 2fdc7b6 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
  42. 4c8b771 Merge cherrypicks of [19500904, 19747499, 19747692, 19680038, 19698796, 20077612, 19943187, 19956048, 20058355, 20105077] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 3 months ago
  43. bb8740e Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
  44. 0bb80e1 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
  45. dc463a9 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
  46. ade8d7f Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
  47. 331b9de Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
  48. 8fffa0c Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 4 months ago
  49. e5899fa Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 4 months ago
  50. 8d867aa Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
  51. 41f6353 Added max buffer length check by Brian Delwiche · 2 years, 4 months ago
  52. 15a5c65 Add length check when copy AVDTP packet by Ted Wang · 2 years, 5 months ago
  53. c8d1ac8 Merge cherrypicks of [19625563, 19595932, 19612675] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 4 months ago
  54. a955d3b Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago
  55. 0dc8782 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
  56. 30178c6 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
  57. ef40e7e Merge cherrypicks of [19588293, 19600909] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  58. 2d6ac9f Merge cherrypicks of [17530926, 19500904] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  59. c26dc0b Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 2 years, 5 months ago
  60. ba29753 Reconfigure Address policy on last bond removed by Rahul Sabnis · 2 years, 5 months ago
  61. 9f563b2 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 9 months ago
  62. 4994089 Merge cherrypicks of [19203172] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  63. cea8f23 Added platform_compat_config to enable target sdk check by Etienne Ruffieux · 2 years, 6 months ago
  64. 5fc8a1d Merge cherrypicks of [19132091] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  65. dddf115 Do resolving list operations via handler by Chienyuan · 2 years, 6 months ago
  66. c97cda9 Merge cherrypicks of [19129326, 19129327] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  67. ce74739 BassClient: Force PA sync reset before removing source by xiaowang · 2 years, 6 months ago
  68. 02be37d BassClient: Fix issue that source could not be found by xiaowang · 2 years, 6 months ago
  69. bdb818e Merge cherrypicks of [19120567, 19120540, 19120541, 19120542, 19129144, 19129145] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  70. 04b2b91 Revert "BassClient: Fix issue that source could not be found" by xiaowang · 2 years, 6 months ago
  71. 39b9602 Revert "BassClient: Force PA sync reset before removing source" by xiaowang · 2 years, 6 months ago
  72. 37f24e5 Revert "Revert "Immediately execute instead of queueing request ..." by Rahul Sabnis · 2 years, 6 months ago
  73. a526982 Revert "Revert "Make SDP and inquiry request dequeue and execute..." by Rahul Sabnis · 2 years, 6 months ago
  74. dd8e4ca Revert^2 "Queue discovery and device inquiry while bonding" by Rahul Sabnis · 2 years, 6 months ago
  75. 0ebbe9d Catch IAE in BluetoothManagerService by Sungsoo Lim · 2 years, 6 months ago
  76. 1eb3558 Merge cherrypicks of [19093297, 19123578] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  77. 856f6ac Revert "Revert "Reuse SynchronousResultReceivers instead of creating new."" by Neha Jain · 2 years, 6 months ago
  78. 4c024a2 Revert "leaudio: Make LE Connection Interval a multiple of SDU_Interval" by Jack He · 2 years, 6 months ago
  79. 94ea60d Merge cherrypicks of [19114242] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  80. dd85e91 Revert "Reuse SynchronousResultReceivers instead of creating new." by Neha Jain · 2 years, 6 months ago
  81. f8b9ffa Merge cherrypicks of [19039092, 19068701, 19032880] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  82. 655653f GATT: Disable notifications when disconnecting by Jakub Pawlowski · 2 years, 6 months ago
  83. 67952a5 gatt: Fix incorrect write to the descriptor. by Łukasz Rymanowski · 2 years, 6 months ago
  84. 5467b90 Reuse SynchronousResultReceivers instead of creating new. by Etienne Ruffieux · 2 years, 6 months ago
  85. 5862dee Merge cherrypicks of [19038673] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  86. 13a625e Move user file along to the new package name by William Escande · 2 years, 7 months ago
  87. 68d0d2e Snap for 8762204 from e880d2196e06e8d2704c596c375d0938190aa437 to tm-release by Android Build Coastguard Worker · 2 years, 6 months ago
  88. e880d21 Merge "HAL: Avoid FATAL log on expected transaction status" into tm-dev by Zach Johnson · 2 years, 6 months ago
  89. 8f603bd Merge "Change Bluetooth apex mountpoint" into tm-dev by TreeHugger Robot · 2 years, 6 months ago
  90. 3e4c27d Always create connection when hci status SUCCESS by Chris Manton · 2 years, 6 months ago
  91. 287e72f Merge "Prevent IAE caused by empty media ids" into tm-dev by TreeHugger Robot · 2 years, 6 months ago
  92. 43a5816 Merge "Fix flakiness in LeAdvancedScanningTest lost test" into tm-dev by Christine Hallstrom · 2 years, 6 months ago
  93. d72af4a Fix flakiness in LeAdvancedScanningTest lost test by Christine Hallstrom · 2 years, 6 months ago
  94. 619aba9 Snap for 8756258 from 288cc620d28fc704a988aecdef9aca411cef7cdc to tm-release by Android Build Coastguard Worker · 2 years, 6 months ago
  95. 0ea3c8a Prevent IAE caused by empty media ids by Sungsoo Lim · 2 years, 6 months ago
  96. 8e1ae01 Change Bluetooth apex mountpoint by William Escande · 2 years, 6 months ago
  97. fa4d1e3 Move version in apex_manifest by William Escande · 2 years, 6 months ago
  98. 288cc62 Merge "Rename Bluetooth apex and APK" into tm-dev by Oriol Prieto Gascó · 2 years, 6 months ago
  99. c7f0453 HAL: Avoid FATAL log on expected transaction status by Josh Wu · 2 years, 7 months ago
  100. 95e5f0a Merge "Handle empty battery level" into tm-dev by Kyunglyul Hyun · 2 years, 6 months ago