1. bdcc9b8 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  2. fd1d5e7 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  3. c077ffb Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  4. f173fcb Fix a OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 1 year, 11 months ago
  5. 4a33fbc Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  6. b4a2677 Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev by Brian Delwiche · 1 year, 10 months ago
  7. e6cf270 Revert "Validate buffer length in sdpu_build_uuid_seq" by Brian Delwiche · 1 year, 10 months ago
  8. d778666 Merge "Validate buffer length in sdpu_build_uuid_seq" into tm-dev by Brian Delwiche · 1 year, 10 months ago
  9. 367ed05 Validate buffer length in sdpu_build_uuid_seq by Brian Delwiche · 2 years ago
  10. c87c558 Merge "Fix an OOB bug in gatt_dbg_op_name" into tm-dev by Hui Peng · 1 year, 11 months ago
  11. aa36630 Merge "Fix a few bugs in btm_ble_batchscan_filter_track_adv_vse_cback" into tm-dev by Hui Peng · 1 year, 11 months ago
  12. 8b06282 Merge "Fix an OOB bug in btm_acl_process_sca_cmpl_pkt" into tm-dev by Hui Peng · 1 year, 11 months ago
  13. 1ee290b Reject encryption drop in Common Criteria mode by Brian Delwiche · 2 years ago
  14. 9e1c962 Merge "Fix an OOB bug in btm_ble_ltk_request" into tm-dev by Hui Peng · 1 year, 11 months ago
  15. 65930cf Merge "Fix an OOB bug in remove_sdp_record" into tm-dev by Hui Peng · 1 year, 11 months ago
  16. 5d3fdb2 Merge "Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd" into tm-dev by Hui Peng · 1 year, 11 months ago
  17. c5e898d Fix a few bugs in btm_ble_batchscan_filter_track_adv_vse_cback by Hui Peng · 2 years ago
  18. b8354c4 Merge "Fix an OOB bug in on_remove_iso_data_path" into tm-dev by Hui Peng · 1 year, 11 months ago
  19. 47cd388 Fix an OOB bug in btm_ble_ltk_request by Hui Peng · 2 years ago
  20. 334a5b3 Merge "Fix a nullptr-deref in on_create_record_event" into tm-dev by Hui Peng · 1 year, 11 months ago
  21. e241804 Merge "Fix an OOB bug in register_notification_rsp" into tm-dev by Hui Peng · 1 year, 11 months ago
  22. b9a94d5 Fix an OOB bug in remove_sdp_record by Hui Peng · 2 years ago
  23. 4b008a2 Fix an OOB bug in btm_acl_process_sca_cmpl_pkt by Hui Peng · 2 years ago
  24. a24402d Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd by Hui Peng · 2 years ago
  25. 1a8a5ec Fix an OOB bug in on_remove_iso_data_path by Hui Peng · 1 year, 11 months ago
  26. f9f1695 Merge "Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp"" into tm-dev by David Duarte · 1 year, 11 months ago
  27. 2506a98 Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp" by Hui Peng · 1 year, 11 months ago
  28. 8f013f7 Fix an OOB bug in gatt_dbg_op_name by Hui Peng · 2 years ago
  29. daa3efc Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
  30. b45b847 Fix a nullptr-deref in on_create_record_event by Hui Peng · 2 years ago
  31. d0fc426 Merge "Harden array bounds validation" into tm-dev by Brian Delwiche · 2 years ago
  32. cbea7ae Merge "Fix an OOB access bug in btm_vendor_specific_evt" into tm-dev by Hui Peng · 2 years ago
  33. 0e1b29e Merge "Fix a potential OOB read resulted from integer underflow" into tm-dev by Hui Peng · 2 years ago
  34. 047a68b Fix an OOB bug in btm_read_rssi_complete by Hui Peng · 2 years, 1 month ago
  35. 976361c Merge "Add regression test for b/254774758" into tm-dev by Hui Peng · 2 years ago
  36. be2a157 Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
  37. a3141b5 Merge "Add mocking support for now function in AttributionProcessor" into tm-dev by Hui Peng · 2 years ago
  38. 5409196 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
  39. 9c12298 Fix an OOB access bug in btm_vendor_specific_evt by Hui Peng · 2 years ago
  40. e6d1eec Merge "Fix an OOB bug in btm_delete_stored_link_key_complete" into tm-dev by Hui Peng · 2 years ago
  41. 56bb00a Merge "Fix an OOB bug in btm_ble_rand_enc_complete" into tm-dev by Hui Peng · 2 years ago
  42. ba4fd4c Merge "Fix an OOB bug in btm_read_tx_power_complete" into tm-dev by Hui Peng · 2 years ago
  43. 9056999 Merge "Fix an OOB bug in btu_ble_rc_param_req_evt" into tm-dev by Hui Peng · 2 years ago
  44. 398f10c Merge "Fix an OOB bug in btm_ble_read_remote_features_complete" into tm-dev by Hui Peng · 2 years ago
  45. 78e6c13 Merge "Fix an OOB bug in btu_ble_ll_conn_param_upd_evt" into tm-dev by Hui Peng · 2 years ago
  46. 45027bb Merge "Fix an OOB write in BTA_GATTS_HandleValueIndication" into tm-dev by Hui Peng · 2 years ago
  47. 0a90387 Merge "Fix an OOB bug in btm_create_conn_cancel_complete" into tm-dev by Hui Peng · 2 years ago
  48. 96c1215 Merge "Fix an OOB bug in btm_ble_write_adv_enable_complete" into tm-dev by Hui Peng · 2 years ago
  49. 993b073 Merge "Fix an OOB bug in btm_read_local_oob_complete" into tm-dev by Hui Peng · 2 years ago
  50. bfdef9b Merge "Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket" into tm-dev by TreeHugger Robot · 2 years ago
  51. 8855f6c Merge "Fix an OOB bug in btm_read_link_quality_complete" into tm-dev by Hui Peng · 2 years ago
  52. 6494326 Merge "Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt" into tm-dev by Hui Peng · 2 years ago
  53. d104769 Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket by Hui Peng · 2 years, 1 month ago
  54. f7679c1 Fix an OOB bug in on_iso_link_quality_read by Hui Peng · 2 years, 1 month ago
  55. 0ab9b92 Fix an OOB bug in btm_delete_stored_link_key_complete by Hui Peng · 2 years, 1 month ago
  56. 6aedab3 Fix an OOB bug in btm_ble_read_remote_features_complete by Hui Peng · 2 years, 1 month ago
  57. 14eaa92 Fix an OOB bug in btm_read_local_oob_complete by Hui Peng · 2 years, 1 month ago
  58. 606824a Fix an OOB bug in btm_read_tx_power_complete by Hui Peng · 2 years, 1 month ago
  59. 5bdefb7 Fix an OOB bug in btu_ble_rc_param_req_evt by Hui Peng · 2 years ago
  60. a3c7e63 Fix an OOB write in BTA_GATTS_HandleValueIndication by Hui Peng · 2 years ago
  61. 45e8d2d Merge "Fix an OOB write in SDP_AddAttribute" into tm-dev by Hui Peng · 2 years ago
  62. e38dbb2 Fix an OOB bug in btm_ble_write_adv_enable_complete by Hui Peng · 2 years ago
  63. b2c6806 Fix an OOB bug in btm_read_link_quality_complete by Hui Peng · 2 years, 1 month ago
  64. 0450562 Fix an OOB bug in btu_ble_ll_conn_param_upd_evt by Hui Peng · 2 years, 1 month ago
  65. adf06fb Fix an OOB bug in btm_create_conn_cancel_complete by Hui Peng · 2 years, 1 month ago
  66. 8d52336 Fix an OOB bug in btm_ble_rand_enc_complete by Hui Peng · 2 years, 1 month ago
  67. 362a914 Add regression test for b/255304475 by Hui Peng · 2 years, 1 month ago
  68. 1257628 Fix an OOB bug in btm_ble_clear_resolving_list_complete by Hui Peng · 2 years, 1 month ago
  69. 27200cf Add regression test for b/260078907 by Hui Peng · 2 years, 1 month ago
  70. 73827ac Fix an OOB bug in btm_ble_add_resolving_list_entry_complete by Hui Peng · 2 years, 1 month ago
  71. ecd5a3e Fix an OOB bug in BqrVseSubEvt::ParseBqrLinkQualityEvt by Hui Peng · 2 years, 1 month ago
  72. d2e67f5 Fix an OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 2 years, 1 month ago
  73. b6433f1 Fix a potential OOB read resulted from integer underflow by Hui Peng · 2 years, 1 month ago
  74. fb9a519 Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
  75. 15fbebc Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
  76. 0846b5b Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
  77. b0d7d4e Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
  78. 0494f1a Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into tm-dev by Hui Peng · 2 years ago
  79. d4e34d8 Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
  80. 85188d0 Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt by Hui Peng · 2 years ago
  81. 638e487 Revert "Drop connection when atttempting to disable encryption" by Ted Wang · 2 years, 1 month ago
  82. 5f8babc Add regression test for b/258057241 by Hui Peng · 2 years, 1 month ago
  83. 89255db Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
  84. eac401d Merge "Add bounds check in avdt_scb_act.cc" into tm-dev by Brian Delwiche · 2 years, 1 month ago
  85. 9e39995 Merge "Report failure when not able to connect to AVRCP" into tm-dev by Brian Delwiche · 2 years, 1 month ago
  86. e74ee03 Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
  87. d994865 Merge "Fix OPP comparison" into tm-dev by Brian Delwiche · 2 years, 1 month ago
  88. bbbbdb5 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
  89. f8adec6 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
  90. 8c63c7c Drop connection when atttempting to disable encryption by Brian Delwiche · 2 years, 2 months ago
  91. 5ce5469 Merge "Pass IRK rotation flag into native" into tm-dev by Rahul Arya · 2 years, 3 months ago
  92. f7443b7 Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
  93. 031dc50 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
  94. acffc03 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
  95. 57d4dc3 Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
  96. 32ad064 Merge "Fix URI check in BluetoothOppUtility.java" into tm-dev by Brian Delwiche · 2 years, 3 months ago
  97. 65e154c Revert "Defer free in bta_hh_act.cc" by Chris Manton · 2 years, 3 months ago
  98. 29a297b Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
  99. 789d4bc Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
  100. ccf0249 Merge "Fix interger overflow when parsing avrc response" into tm-dev by TreeHugger Robot · 2 years, 3 months ago