1. 97e56f4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059672', 'googleplex-android-review.googlesource.com/27059673', 'googleplex-android-review.googlesource.com/27059674'] into security-aosp-tm-release. by Android Build Coastguard Worker · 6 months ago
  2. 1ef66c4 Disallow connect with key length downgrade by Brian Delwiche · 9 months ago
  3. bfc38f9 Disallow connect with Secure Connections downgrade by Brian Delwiche · 9 months ago
  4. 8c36bb8 Add support for checking security downgrade by Brian Delwiche · 9 months ago
  5. c4a3d25 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27234426', 'googleplex-android-review.googlesource.com/27051267'] into security-aosp-tm-release. by Android Build Coastguard Worker · 7 months ago
  6. 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 9 months ago
  7. ed87ee3 Fix permission bypasses to multiple methods by Brian Delwiche · 8 months ago
  8. de90c90 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059478'] into security-aosp-tm-release. by Android Build Coastguard Worker · 8 months ago
  9. 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 9 months ago
  10. 5b68e60 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25492676', 'googleplex-android-review.googlesource.com/25494184', 'googleplex-android-review.googlesource.com/25558746', 'googleplex-android-review.googlesource.com/25676552', 'googleplex-android-review.googlesource.com/25842635'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year ago
  11. c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 1 year ago
  12. 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 5 months ago
  13. 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  14. f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 5 months ago
  15. 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 3 months ago
  16. 3ba8ea5 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25558746'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
  17. f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  18. 563efcb Merge cherrypicks of ['googleplex-android-review.googlesource.com/22948134', 'googleplex-android-review.googlesource.com/25503067', 'googleplex-android-review.googlesource.com/25494184'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
  19. 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 5 months ago
  20. 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 3 months ago
  21. 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 9 months ago
  22. 7c62ba0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23398897'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 2 months ago
  23. 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 8 months ago
  24. 16a1aa0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22919959', 'googleplex-android-review.googlesource.com/24737501', 'googleplex-android-review.googlesource.com/24737502', 'googleplex-android-review.googlesource.com/24737503', 'googleplex-android-review.googlesource.com/24737504', 'googleplex-android-review.googlesource.com/24737505', 'googleplex-android-review.googlesource.com/24638916', 'googleplex-android-review.googlesource.com/24638579', 'googleplex-android-review.googlesource.com/23356997', 'googleplex-android-review.googlesource.com/24234506', 'googleplex-android-review.googlesource.com/24972364'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 3 months ago
  25. 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
  26. 5bfd817 Fix UAF in ~CallbackEnv by Brian Delwiche · 1 year, 5 months ago
  27. 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 8 months ago
  28. a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 5 months ago
  29. ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 5 months ago
  30. 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
  31. 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
  32. a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
  33. f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 5 months ago
  34. 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 5 months ago
  35. 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 9 months ago
  36. 9d74d4c Merge cherrypicks of ['googleplex-android-review.googlesource.com/23252652'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  37. c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
  38. 48779ff Merge cherrypicks of ['googleplex-android-review.googlesource.com/24131190'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  39. 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 6 months ago
  40. 4209fc3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22900658', 'googleplex-android-review.googlesource.com/23152794', 'googleplex-android-review.googlesource.com/23152778', 'googleplex-android-review.googlesource.com/22726306', 'googleplex-android-review.googlesource.com/21609715', 'googleplex-android-review.googlesource.com/22581496'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
  41. d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  42. b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 11 months ago
  43. 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 9 months ago
  44. 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  45. d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  46. 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 9 months ago
  47. bb6c888 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22316109'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
  48. ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 10 months ago
  49. 2d15008 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22343125', 'googleplex-android-review.googlesource.com/22188831'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 9 months ago
  50. bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 10 months ago
  51. 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 10 months ago
  52. b900cad Merge cherrypicks of ['googleplex-android-review.googlesource.com/20657353', 'googleplex-android-review.googlesource.com/20606225', 'googleplex-android-review.googlesource.com/20617177', 'googleplex-android-review.googlesource.com/20617178', 'googleplex-android-review.googlesource.com/20995769'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 11 months ago
  53. 7e5f891 Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
  54. d44034f Add regression test for b/254774758 by Hui Peng · 2 years, 2 months ago
  55. d24a07f Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 2 months ago
  56. 6a2e3c8 Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 2 months ago
  57. 75e6645 Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
  58. 986839b Merge cherrypicks of ['ag/20810842', 'ag/20657355', 'ag/20810318', 'ag/20813130'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years ago
  59. 1e27ef6 Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years, 1 month ago
  60. 8d608f6 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
  61. b6f74ca Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
  62. b77b03e Merge cherrypicks of ['ag/20416689', 'ag/20611095', 'ag/20068633'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 1 month ago
  63. 4d51a09 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 4 months ago
  64. 0c19bbd Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
  65. 2fdc7b6 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
  66. 4c8b771 Merge cherrypicks of [19500904, 19747499, 19747692, 19680038, 19698796, 20077612, 19943187, 19956048, 20058355, 20105077] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 3 months ago
  67. bb8740e Pass IRK rotation flag into native by Rahul Arya · 2 years, 4 months ago
  68. 0bb80e1 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 4 months ago
  69. dc463a9 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 4 months ago
  70. ade8d7f Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
  71. 331b9de Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 4 months ago
  72. 8fffa0c Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 5 months ago
  73. e5899fa Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 5 months ago
  74. 8d867aa Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
  75. 41f6353 Added max buffer length check by Brian Delwiche · 2 years, 5 months ago
  76. 15a5c65 Add length check when copy AVDTP packet by Ted Wang · 2 years, 6 months ago
  77. c8d1ac8 Merge cherrypicks of [19625563, 19595932, 19612675] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 4 months ago
  78. a955d3b Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago
  79. 0dc8782 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
  80. 30178c6 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
  81. ef40e7e Merge cherrypicks of [19588293, 19600909] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  82. 2d6ac9f Merge cherrypicks of [17530926, 19500904] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  83. c26dc0b Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 2 years, 5 months ago
  84. ba29753 Reconfigure Address policy on last bond removed by Rahul Sabnis · 2 years, 5 months ago
  85. 9f563b2 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 10 months ago
  86. 4994089 Merge cherrypicks of [19203172] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  87. cea8f23 Added platform_compat_config to enable target sdk check by Etienne Ruffieux · 2 years, 6 months ago
  88. 5fc8a1d Merge cherrypicks of [19132091] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  89. dddf115 Do resolving list operations via handler by Chienyuan · 2 years, 7 months ago
  90. c97cda9 Merge cherrypicks of [19129326, 19129327] into tm-release. by Android Build Coastguard Worker · 2 years, 7 months ago
  91. ce74739 BassClient: Force PA sync reset before removing source by xiaowang · 2 years, 7 months ago
  92. 02be37d BassClient: Fix issue that source could not be found by xiaowang · 2 years, 7 months ago
  93. bdb818e Merge cherrypicks of [19120567, 19120540, 19120541, 19120542, 19129144, 19129145] into tm-release. by Android Build Coastguard Worker · 2 years, 7 months ago
  94. 04b2b91 Revert "BassClient: Fix issue that source could not be found" by xiaowang · 2 years, 7 months ago
  95. 39b9602 Revert "BassClient: Force PA sync reset before removing source" by xiaowang · 2 years, 7 months ago
  96. 37f24e5 Revert "Revert "Immediately execute instead of queueing request ..." by Rahul Sabnis · 2 years, 7 months ago
  97. a526982 Revert "Revert "Make SDP and inquiry request dequeue and execute..." by Rahul Sabnis · 2 years, 7 months ago
  98. dd8e4ca Revert^2 "Queue discovery and device inquiry while bonding" by Rahul Sabnis · 2 years, 7 months ago
  99. 0ebbe9d Catch IAE in BluetoothManagerService by Sungsoo Lim · 2 years, 7 months ago
  100. 1eb3558 Merge cherrypicks of [19093297, 19123578] into tm-release. by Android Build Coastguard Worker · 2 years, 7 months ago