- 5d3fdb2 Merge "Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd" into tm-dev by Hui Peng · 2 years ago
- b8354c4 Merge "Fix an OOB bug in on_remove_iso_data_path" into tm-dev by Hui Peng · 2 years ago
- 334a5b3 Merge "Fix a nullptr-deref in on_create_record_event" into tm-dev by Hui Peng · 2 years ago
- e241804 Merge "Fix an OOB bug in register_notification_rsp" into tm-dev by Hui Peng · 2 years ago
- a24402d Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd by Hui Peng · 2 years ago
- 1a8a5ec Fix an OOB bug in on_remove_iso_data_path by Hui Peng · 2 years ago
- f9f1695 Merge "Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp"" into tm-dev by David Duarte · 2 years ago
- 2506a98 Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp" by Hui Peng · 2 years ago
- daa3efc Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
- b45b847 Fix a nullptr-deref in on_create_record_event by Hui Peng · 2 years ago
- d0fc426 Merge "Harden array bounds validation" into tm-dev by Brian Delwiche · 2 years ago
- cbea7ae Merge "Fix an OOB access bug in btm_vendor_specific_evt" into tm-dev by Hui Peng · 2 years ago
- 0e1b29e Merge "Fix a potential OOB read resulted from integer underflow" into tm-dev by Hui Peng · 2 years ago
- 047a68b Fix an OOB bug in btm_read_rssi_complete by Hui Peng · 2 years, 1 month ago
- 976361c Merge "Add regression test for b/254774758" into tm-dev by Hui Peng · 2 years ago
- be2a157 Add regression test for b/254774758 by Hui Peng · 2 years, 2 months ago
- a3141b5 Merge "Add mocking support for now function in AttributionProcessor" into tm-dev by Hui Peng · 2 years ago
- 5409196 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
- 9c12298 Fix an OOB access bug in btm_vendor_specific_evt by Hui Peng · 2 years, 1 month ago
- e6d1eec Merge "Fix an OOB bug in btm_delete_stored_link_key_complete" into tm-dev by Hui Peng · 2 years ago
- 56bb00a Merge "Fix an OOB bug in btm_ble_rand_enc_complete" into tm-dev by Hui Peng · 2 years ago
- ba4fd4c Merge "Fix an OOB bug in btm_read_tx_power_complete" into tm-dev by Hui Peng · 2 years ago
- 9056999 Merge "Fix an OOB bug in btu_ble_rc_param_req_evt" into tm-dev by Hui Peng · 2 years ago
- 398f10c Merge "Fix an OOB bug in btm_ble_read_remote_features_complete" into tm-dev by Hui Peng · 2 years ago
- 78e6c13 Merge "Fix an OOB bug in btu_ble_ll_conn_param_upd_evt" into tm-dev by Hui Peng · 2 years ago
- 45027bb Merge "Fix an OOB write in BTA_GATTS_HandleValueIndication" into tm-dev by Hui Peng · 2 years ago
- 0a90387 Merge "Fix an OOB bug in btm_create_conn_cancel_complete" into tm-dev by Hui Peng · 2 years ago
- 96c1215 Merge "Fix an OOB bug in btm_ble_write_adv_enable_complete" into tm-dev by Hui Peng · 2 years ago
- 993b073 Merge "Fix an OOB bug in btm_read_local_oob_complete" into tm-dev by Hui Peng · 2 years ago
- bfdef9b Merge "Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket" into tm-dev by TreeHugger Robot · 2 years ago
- 8855f6c Merge "Fix an OOB bug in btm_read_link_quality_complete" into tm-dev by Hui Peng · 2 years ago
- 6494326 Merge "Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt" into tm-dev by Hui Peng · 2 years ago
- d104769 Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket by Hui Peng · 2 years, 1 month ago
- f7679c1 Fix an OOB bug in on_iso_link_quality_read by Hui Peng · 2 years, 1 month ago
- 0ab9b92 Fix an OOB bug in btm_delete_stored_link_key_complete by Hui Peng · 2 years, 1 month ago
- 6aedab3 Fix an OOB bug in btm_ble_read_remote_features_complete by Hui Peng · 2 years, 1 month ago
- 14eaa92 Fix an OOB bug in btm_read_local_oob_complete by Hui Peng · 2 years, 1 month ago
- 606824a Fix an OOB bug in btm_read_tx_power_complete by Hui Peng · 2 years, 1 month ago
- 5bdefb7 Fix an OOB bug in btu_ble_rc_param_req_evt by Hui Peng · 2 years, 1 month ago
- a3c7e63 Fix an OOB write in BTA_GATTS_HandleValueIndication by Hui Peng · 2 years, 1 month ago
- 45e8d2d Merge "Fix an OOB write in SDP_AddAttribute" into tm-dev by Hui Peng · 2 years ago
- e38dbb2 Fix an OOB bug in btm_ble_write_adv_enable_complete by Hui Peng · 2 years, 1 month ago
- b2c6806 Fix an OOB bug in btm_read_link_quality_complete by Hui Peng · 2 years, 1 month ago
- 0450562 Fix an OOB bug in btu_ble_ll_conn_param_upd_evt by Hui Peng · 2 years, 1 month ago
- adf06fb Fix an OOB bug in btm_create_conn_cancel_complete by Hui Peng · 2 years, 1 month ago
- 8d52336 Fix an OOB bug in btm_ble_rand_enc_complete by Hui Peng · 2 years, 1 month ago
- 362a914 Add regression test for b/255304475 by Hui Peng · 2 years, 1 month ago
- 1257628 Fix an OOB bug in btm_ble_clear_resolving_list_complete by Hui Peng · 2 years, 1 month ago
- 27200cf Add regression test for b/260078907 by Hui Peng · 2 years, 1 month ago
- 73827ac Fix an OOB bug in btm_ble_add_resolving_list_entry_complete by Hui Peng · 2 years, 1 month ago
- ecd5a3e Fix an OOB bug in BqrVseSubEvt::ParseBqrLinkQualityEvt by Hui Peng · 2 years, 1 month ago
- d2e67f5 Fix an OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 2 years, 1 month ago
- b6433f1 Fix a potential OOB read resulted from integer underflow by Hui Peng · 2 years, 1 month ago
- fb9a519 Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 2 months ago
- 15fbebc Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 2 months ago
- 0846b5b Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years, 1 month ago
- b0d7d4e Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 2 months ago
- 0494f1a Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into tm-dev by Hui Peng · 2 years ago
- d4e34d8 Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
- 85188d0 Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt by Hui Peng · 2 years, 1 month ago
- 638e487 Revert "Drop connection when atttempting to disable encryption" by Ted Wang · 2 years, 1 month ago
- 5f8babc Add regression test for b/258057241 by Hui Peng · 2 years, 2 months ago
- 89255db Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 2 months ago
- eac401d Merge "Add bounds check in avdt_scb_act.cc" into tm-dev by Brian Delwiche · 2 years, 1 month ago
- 9e39995 Merge "Report failure when not able to connect to AVRCP" into tm-dev by Brian Delwiche · 2 years, 1 month ago
- e74ee03 Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
- d994865 Merge "Fix OPP comparison" into tm-dev by Brian Delwiche · 2 years, 2 months ago
- bbbbdb5 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
- f8adec6 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 3 months ago
- 8c63c7c Drop connection when atttempting to disable encryption by Brian Delwiche · 2 years, 3 months ago
- 5ce5469 Merge "Pass IRK rotation flag into native" into tm-dev by Rahul Arya · 2 years, 3 months ago
- f7443b7 Pass IRK rotation flag into native by Rahul Arya · 2 years, 4 months ago
- 031dc50 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 4 months ago
- acffc03 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 4 months ago
- 57d4dc3 Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
- 32ad064 Merge "Fix URI check in BluetoothOppUtility.java" into tm-dev by Brian Delwiche · 2 years, 3 months ago
- 65e154c Revert "Defer free in bta_hh_act.cc" by Chris Manton · 2 years, 4 months ago
- 29a297b Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 4 months ago
- 789d4bc Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 4 months ago
- ccf0249 Merge "Fix interger overflow when parsing avrc response" into tm-dev by TreeHugger Robot · 2 years, 4 months ago
- 573fb61 Merge "Defer free in bta_hh_act.cc" into tm-dev by Brian Delwiche · 2 years, 4 months ago
- 18b1834 Merge "Add length check when copy AVDT and AVCT packet" into tm-dev by Keith Mok · 2 years, 4 months ago
- 299f9e9 Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-dev by TreeHugger Robot · 2 years, 4 months ago
- a6a1829 Merge "Add missing increment in bnep_api.cc" into tm-dev by Brian Delwiche · 2 years, 4 months ago
- 7406459 Merge "Added max buffer length check" into tm-dev by Brian Delwiche · 2 years, 4 months ago
- f497204 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 2 years, 4 months ago
- 20f2531 Merge "Add buffer in pin_reply in bluetooth.cc" into tm-dev by Brian Delwiche · 2 years, 4 months ago
- 644f250 Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
- 6b4acc4 Added max buffer length check by Brian Delwiche · 2 years, 5 months ago
- cde75cf Defer free in bta_hh_act.cc by Brian Delwiche · 2 years, 5 months ago
- 96f108e Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
- 6644c5c Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-dev by TreeHugger Robot · 2 years, 5 months ago
- b973ea8 Merge "Add local to pan_api.cc" into tm-dev by Brian Delwiche · 2 years, 5 months ago
- c99c43f Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 5 months ago
- a60ebe2 Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 2 years, 5 months ago
- 2459b5e Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 5 months ago
- 1ecc7c6 Save UUIDs using properties rather than the pairing_cb_t by Qasim Javed · 2 years, 5 months ago
- 90c4eb3 Merge "Check cached command for ack_pause" into tm-dev by Jack He · 2 years, 5 months ago
- ca6cac4 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
- 2c09d20 Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago