- bdcc9b8 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev by Brian Delwiche · 1 year, 9 months ago
- fd1d5e7 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev by Brian Delwiche · 1 year, 9 months ago
- c077ffb Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
- f173fcb Fix a OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 1 year, 11 months ago
- 4a33fbc Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
- b4a2677 Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev by Brian Delwiche · 1 year, 10 months ago
- e6cf270 Revert "Validate buffer length in sdpu_build_uuid_seq" by Brian Delwiche · 1 year, 10 months ago
- d778666 Merge "Validate buffer length in sdpu_build_uuid_seq" into tm-dev by Brian Delwiche · 1 year, 10 months ago
- 367ed05 Validate buffer length in sdpu_build_uuid_seq by Brian Delwiche · 2 years ago
- c87c558 Merge "Fix an OOB bug in gatt_dbg_op_name" into tm-dev by Hui Peng · 1 year, 11 months ago
- aa36630 Merge "Fix a few bugs in btm_ble_batchscan_filter_track_adv_vse_cback" into tm-dev by Hui Peng · 1 year, 11 months ago
- 8b06282 Merge "Fix an OOB bug in btm_acl_process_sca_cmpl_pkt" into tm-dev by Hui Peng · 1 year, 11 months ago
- 1ee290b Reject encryption drop in Common Criteria mode by Brian Delwiche · 2 years ago
- 9e1c962 Merge "Fix an OOB bug in btm_ble_ltk_request" into tm-dev by Hui Peng · 1 year, 11 months ago
- 65930cf Merge "Fix an OOB bug in remove_sdp_record" into tm-dev by Hui Peng · 1 year, 11 months ago
- 5d3fdb2 Merge "Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd" into tm-dev by Hui Peng · 1 year, 11 months ago
- c5e898d Fix a few bugs in btm_ble_batchscan_filter_track_adv_vse_cback by Hui Peng · 2 years ago
- b8354c4 Merge "Fix an OOB bug in on_remove_iso_data_path" into tm-dev by Hui Peng · 1 year, 11 months ago
- 47cd388 Fix an OOB bug in btm_ble_ltk_request by Hui Peng · 2 years ago
- 334a5b3 Merge "Fix a nullptr-deref in on_create_record_event" into tm-dev by Hui Peng · 1 year, 11 months ago
- e241804 Merge "Fix an OOB bug in register_notification_rsp" into tm-dev by Hui Peng · 1 year, 11 months ago
- b9a94d5 Fix an OOB bug in remove_sdp_record by Hui Peng · 2 years ago
- 4b008a2 Fix an OOB bug in btm_acl_process_sca_cmpl_pkt by Hui Peng · 2 years ago
- a24402d Fix an OOB bug in btm_ble_periodic_adv_sync_tx_rcvd by Hui Peng · 2 years ago
- 1a8a5ec Fix an OOB bug in on_remove_iso_data_path by Hui Peng · 1 year, 11 months ago
- f9f1695 Merge "Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp"" into tm-dev by David Duarte · 1 year, 11 months ago
- 2506a98 Revert "Fix an OOB bug in bta_hh_co_get_rpt_rsp" by Hui Peng · 1 year, 11 months ago
- 8f013f7 Fix an OOB bug in gatt_dbg_op_name by Hui Peng · 2 years ago
- daa3efc Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
- b45b847 Fix a nullptr-deref in on_create_record_event by Hui Peng · 2 years ago
- d0fc426 Merge "Harden array bounds validation" into tm-dev by Brian Delwiche · 2 years ago
- cbea7ae Merge "Fix an OOB access bug in btm_vendor_specific_evt" into tm-dev by Hui Peng · 2 years ago
- 0e1b29e Merge "Fix a potential OOB read resulted from integer underflow" into tm-dev by Hui Peng · 2 years ago
- 047a68b Fix an OOB bug in btm_read_rssi_complete by Hui Peng · 2 years, 1 month ago
- 976361c Merge "Add regression test for b/254774758" into tm-dev by Hui Peng · 2 years ago
- be2a157 Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
- a3141b5 Merge "Add mocking support for now function in AttributionProcessor" into tm-dev by Hui Peng · 2 years ago
- 5409196 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
- 9c12298 Fix an OOB access bug in btm_vendor_specific_evt by Hui Peng · 2 years ago
- e6d1eec Merge "Fix an OOB bug in btm_delete_stored_link_key_complete" into tm-dev by Hui Peng · 2 years ago
- 56bb00a Merge "Fix an OOB bug in btm_ble_rand_enc_complete" into tm-dev by Hui Peng · 2 years ago
- ba4fd4c Merge "Fix an OOB bug in btm_read_tx_power_complete" into tm-dev by Hui Peng · 2 years ago
- 9056999 Merge "Fix an OOB bug in btu_ble_rc_param_req_evt" into tm-dev by Hui Peng · 2 years ago
- 398f10c Merge "Fix an OOB bug in btm_ble_read_remote_features_complete" into tm-dev by Hui Peng · 2 years ago
- 78e6c13 Merge "Fix an OOB bug in btu_ble_ll_conn_param_upd_evt" into tm-dev by Hui Peng · 2 years ago
- 45027bb Merge "Fix an OOB write in BTA_GATTS_HandleValueIndication" into tm-dev by Hui Peng · 2 years ago
- 0a90387 Merge "Fix an OOB bug in btm_create_conn_cancel_complete" into tm-dev by Hui Peng · 2 years ago
- 96c1215 Merge "Fix an OOB bug in btm_ble_write_adv_enable_complete" into tm-dev by Hui Peng · 2 years ago
- 993b073 Merge "Fix an OOB bug in btm_read_local_oob_complete" into tm-dev by Hui Peng · 2 years ago
- bfdef9b Merge "Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket" into tm-dev by TreeHugger Robot · 2 years ago
- 8855f6c Merge "Fix an OOB bug in btm_read_link_quality_complete" into tm-dev by Hui Peng · 2 years ago
- 6494326 Merge "Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt" into tm-dev by Hui Peng · 2 years ago
- d104769 Fix an OOB access bug in BtaAvCo::GetNextSourceDataPacket by Hui Peng · 2 years, 1 month ago
- f7679c1 Fix an OOB bug in on_iso_link_quality_read by Hui Peng · 2 years, 1 month ago
- 0ab9b92 Fix an OOB bug in btm_delete_stored_link_key_complete by Hui Peng · 2 years, 1 month ago
- 6aedab3 Fix an OOB bug in btm_ble_read_remote_features_complete by Hui Peng · 2 years, 1 month ago
- 14eaa92 Fix an OOB bug in btm_read_local_oob_complete by Hui Peng · 2 years, 1 month ago
- 606824a Fix an OOB bug in btm_read_tx_power_complete by Hui Peng · 2 years, 1 month ago
- 5bdefb7 Fix an OOB bug in btu_ble_rc_param_req_evt by Hui Peng · 2 years ago
- a3c7e63 Fix an OOB write in BTA_GATTS_HandleValueIndication by Hui Peng · 2 years ago
- 45e8d2d Merge "Fix an OOB write in SDP_AddAttribute" into tm-dev by Hui Peng · 2 years ago
- e38dbb2 Fix an OOB bug in btm_ble_write_adv_enable_complete by Hui Peng · 2 years ago
- b2c6806 Fix an OOB bug in btm_read_link_quality_complete by Hui Peng · 2 years, 1 month ago
- 0450562 Fix an OOB bug in btu_ble_ll_conn_param_upd_evt by Hui Peng · 2 years, 1 month ago
- adf06fb Fix an OOB bug in btm_create_conn_cancel_complete by Hui Peng · 2 years, 1 month ago
- 8d52336 Fix an OOB bug in btm_ble_rand_enc_complete by Hui Peng · 2 years, 1 month ago
- 362a914 Add regression test for b/255304475 by Hui Peng · 2 years, 1 month ago
- 1257628 Fix an OOB bug in btm_ble_clear_resolving_list_complete by Hui Peng · 2 years, 1 month ago
- 27200cf Add regression test for b/260078907 by Hui Peng · 2 years, 1 month ago
- 73827ac Fix an OOB bug in btm_ble_add_resolving_list_entry_complete by Hui Peng · 2 years, 1 month ago
- ecd5a3e Fix an OOB bug in BqrVseSubEvt::ParseBqrLinkQualityEvt by Hui Peng · 2 years, 1 month ago
- d2e67f5 Fix an OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 2 years, 1 month ago
- b6433f1 Fix a potential OOB read resulted from integer underflow by Hui Peng · 2 years, 1 month ago
- fb9a519 Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
- 15fbebc Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
- 0846b5b Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
- b0d7d4e Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
- 0494f1a Merge "Fix an OOB Write bug in gatt_check_write_long_terminate" into tm-dev by Hui Peng · 2 years ago
- d4e34d8 Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
- 85188d0 Fix an OOB bug in btm_ble_process_periodic_adv_sync_lost_evt by Hui Peng · 2 years ago
- 638e487 Revert "Drop connection when atttempting to disable encryption" by Ted Wang · 2 years, 1 month ago
- 5f8babc Add regression test for b/258057241 by Hui Peng · 2 years, 1 month ago
- 89255db Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
- eac401d Merge "Add bounds check in avdt_scb_act.cc" into tm-dev by Brian Delwiche · 2 years, 1 month ago
- 9e39995 Merge "Report failure when not able to connect to AVRCP" into tm-dev by Brian Delwiche · 2 years, 1 month ago
- e74ee03 Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
- d994865 Merge "Fix OPP comparison" into tm-dev by Brian Delwiche · 2 years, 1 month ago
- bbbbdb5 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
- f8adec6 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
- 8c63c7c Drop connection when atttempting to disable encryption by Brian Delwiche · 2 years, 2 months ago
- 5ce5469 Merge "Pass IRK rotation flag into native" into tm-dev by Rahul Arya · 2 years, 3 months ago
- f7443b7 Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
- 031dc50 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
- acffc03 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
- 57d4dc3 Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
- 32ad064 Merge "Fix URI check in BluetoothOppUtility.java" into tm-dev by Brian Delwiche · 2 years, 3 months ago
- 65e154c Revert "Defer free in bta_hh_act.cc" by Chris Manton · 2 years, 3 months ago
- 29a297b Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
- 789d4bc Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
- ccf0249 Merge "Fix interger overflow when parsing avrc response" into tm-dev by TreeHugger Robot · 2 years, 3 months ago