1. ecc1446 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
  2. 3413e11 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
  3. e2ee3fb Merge cherrypicks of ['googleplex-android-review.googlesource.com/28501296'] into security-aosp-tm-release. by Android Build Coastguard Worker · 5 months ago
  4. c291a63 RESTRICT AUTOMERGE Disallow unexpected incoming HID connections by Himanshu Rawat · 9 months ago
  5. 97e56f4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059672', 'googleplex-android-review.googlesource.com/27059673', 'googleplex-android-review.googlesource.com/27059674'] into security-aosp-tm-release. by Android Build Coastguard Worker · 6 months ago
  6. 1ef66c4 Disallow connect with key length downgrade by Brian Delwiche · 8 months ago
  7. bfc38f9 Disallow connect with Secure Connections downgrade by Brian Delwiche · 8 months ago
  8. 8c36bb8 Add support for checking security downgrade by Brian Delwiche · 8 months ago
  9. c4a3d25 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27234426', 'googleplex-android-review.googlesource.com/27051267'] into security-aosp-tm-release. by Android Build Coastguard Worker · 7 months ago
  10. 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 8 months ago
  11. ed87ee3 Fix permission bypasses to multiple methods by Brian Delwiche · 8 months ago
  12. de90c90 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059478'] into security-aosp-tm-release. by Android Build Coastguard Worker · 8 months ago
  13. 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 8 months ago
  14. 5b68e60 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25492676', 'googleplex-android-review.googlesource.com/25494184', 'googleplex-android-review.googlesource.com/25558746', 'googleplex-android-review.googlesource.com/25676552', 'googleplex-android-review.googlesource.com/25842635'] into security-aosp-tm-release. by Android Build Coastguard Worker · 12 months ago
  15. c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 12 months ago
  16. 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  17. 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  18. f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  19. 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 2 months ago
  20. 3ba8ea5 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25558746'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year ago
  21. f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  22. 563efcb Merge cherrypicks of ['googleplex-android-review.googlesource.com/22948134', 'googleplex-android-review.googlesource.com/25503067', 'googleplex-android-review.googlesource.com/25494184'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
  23. 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  24. 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 2 months ago
  25. 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 8 months ago
  26. 7c62ba0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23398897'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 2 months ago
  27. 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 7 months ago
  28. 16a1aa0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22919959', 'googleplex-android-review.googlesource.com/24737501', 'googleplex-android-review.googlesource.com/24737502', 'googleplex-android-review.googlesource.com/24737503', 'googleplex-android-review.googlesource.com/24737504', 'googleplex-android-review.googlesource.com/24737505', 'googleplex-android-review.googlesource.com/24638916', 'googleplex-android-review.googlesource.com/24638579', 'googleplex-android-review.googlesource.com/23356997', 'googleplex-android-review.googlesource.com/24234506', 'googleplex-android-review.googlesource.com/24972364'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 3 months ago
  29. 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
  30. 5bfd817 Fix UAF in ~CallbackEnv by Brian Delwiche · 1 year, 5 months ago
  31. 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
  32. a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
  33. ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
  34. 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
  35. 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
  36. a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
  37. f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
  38. 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
  39. 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
  40. 9d74d4c Merge cherrypicks of ['googleplex-android-review.googlesource.com/23252652'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  41. c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
  42. 48779ff Merge cherrypicks of ['googleplex-android-review.googlesource.com/24131190'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  43. 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
  44. 4209fc3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22900658', 'googleplex-android-review.googlesource.com/23152794', 'googleplex-android-review.googlesource.com/23152778', 'googleplex-android-review.googlesource.com/22726306', 'googleplex-android-review.googlesource.com/21609715', 'googleplex-android-review.googlesource.com/22581496'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
  45. d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  46. b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  47. 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  48. 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  49. d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  50. 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
  51. bb6c888 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22316109'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
  52. ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  53. 2d15008 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22343125', 'googleplex-android-review.googlesource.com/22188831'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 9 months ago
  54. bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  55. 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  56. b900cad Merge cherrypicks of ['googleplex-android-review.googlesource.com/20657353', 'googleplex-android-review.googlesource.com/20606225', 'googleplex-android-review.googlesource.com/20617177', 'googleplex-android-review.googlesource.com/20617178', 'googleplex-android-review.googlesource.com/20995769'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 11 months ago
  57. 7e5f891 Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
  58. d44034f Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
  59. d24a07f Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
  60. 6a2e3c8 Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
  61. 75e6645 Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
  62. 986839b Merge cherrypicks of ['ag/20810842', 'ag/20657355', 'ag/20810318', 'ag/20813130'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years ago
  63. 1e27ef6 Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
  64. 8d608f6 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
  65. b6f74ca Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
  66. b77b03e Merge cherrypicks of ['ag/20416689', 'ag/20611095', 'ag/20068633'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 1 month ago
  67. 4d51a09 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
  68. 0c19bbd Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
  69. 2fdc7b6 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
  70. 4c8b771 Merge cherrypicks of [19500904, 19747499, 19747692, 19680038, 19698796, 20077612, 19943187, 19956048, 20058355, 20105077] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 3 months ago
  71. bb8740e Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
  72. 0bb80e1 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
  73. dc463a9 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
  74. ade8d7f Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
  75. 331b9de Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
  76. 8fffa0c Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 4 months ago
  77. e5899fa Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 4 months ago
  78. 8d867aa Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
  79. 41f6353 Added max buffer length check by Brian Delwiche · 2 years, 4 months ago
  80. 15a5c65 Add length check when copy AVDTP packet by Ted Wang · 2 years, 5 months ago
  81. c8d1ac8 Merge cherrypicks of [19625563, 19595932, 19612675] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 4 months ago
  82. a955d3b Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago
  83. 0dc8782 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
  84. 30178c6 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
  85. ef40e7e Merge cherrypicks of [19588293, 19600909] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  86. 2d6ac9f Merge cherrypicks of [17530926, 19500904] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
  87. c26dc0b Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 2 years, 5 months ago
  88. ba29753 Reconfigure Address policy on last bond removed by Rahul Sabnis · 2 years, 5 months ago
  89. 9f563b2 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 9 months ago
  90. 4994089 Merge cherrypicks of [19203172] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  91. cea8f23 Added platform_compat_config to enable target sdk check by Etienne Ruffieux · 2 years, 6 months ago
  92. 5fc8a1d Merge cherrypicks of [19132091] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  93. dddf115 Do resolving list operations via handler by Chienyuan · 2 years, 6 months ago
  94. c97cda9 Merge cherrypicks of [19129326, 19129327] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  95. ce74739 BassClient: Force PA sync reset before removing source by xiaowang · 2 years, 6 months ago
  96. 02be37d BassClient: Fix issue that source could not be found by xiaowang · 2 years, 6 months ago
  97. bdb818e Merge cherrypicks of [19120567, 19120540, 19120541, 19120542, 19129144, 19129145] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
  98. 04b2b91 Revert "BassClient: Fix issue that source could not be found" by xiaowang · 2 years, 6 months ago
  99. 39b9602 Revert "BassClient: Force PA sync reset before removing source" by xiaowang · 2 years, 6 months ago
  100. 37f24e5 Revert "Revert "Immediately execute instead of queueing request ..." by Rahul Sabnis · 2 years, 6 months ago