- ecc1446 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
- 3413e11 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
- e2ee3fb Merge cherrypicks of ['googleplex-android-review.googlesource.com/28501296'] into security-aosp-tm-release. by Android Build Coastguard Worker · 5 months ago
- c291a63 RESTRICT AUTOMERGE Disallow unexpected incoming HID connections by Himanshu Rawat · 9 months ago
- 97e56f4 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059672', 'googleplex-android-review.googlesource.com/27059673', 'googleplex-android-review.googlesource.com/27059674'] into security-aosp-tm-release. by Android Build Coastguard Worker · 6 months ago
- 1ef66c4 Disallow connect with key length downgrade by Brian Delwiche · 8 months ago
- bfc38f9 Disallow connect with Secure Connections downgrade by Brian Delwiche · 8 months ago
- 8c36bb8 Add support for checking security downgrade by Brian Delwiche · 8 months ago
- c4a3d25 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27234426', 'googleplex-android-review.googlesource.com/27051267'] into security-aosp-tm-release. by Android Build Coastguard Worker · 7 months ago
- 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 8 months ago
- ed87ee3 Fix permission bypasses to multiple methods by Brian Delwiche · 8 months ago
- de90c90 Merge cherrypicks of ['googleplex-android-review.googlesource.com/27059478'] into security-aosp-tm-release. by Android Build Coastguard Worker · 8 months ago
- 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 8 months ago
- 5b68e60 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25492676', 'googleplex-android-review.googlesource.com/25494184', 'googleplex-android-review.googlesource.com/25558746', 'googleplex-android-review.googlesource.com/25676552', 'googleplex-android-review.googlesource.com/25842635'] into security-aosp-tm-release. by Android Build Coastguard Worker · 12 months ago
- c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 12 months ago
- 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
- f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 2 months ago
- 3ba8ea5 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25558746'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year ago
- f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
- 563efcb Merge cherrypicks of ['googleplex-android-review.googlesource.com/22948134', 'googleplex-android-review.googlesource.com/25503067', 'googleplex-android-review.googlesource.com/25494184'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
- 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 2 months ago
- 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 8 months ago
- 7c62ba0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23398897'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 2 months ago
- 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 7 months ago
- 16a1aa0 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22919959', 'googleplex-android-review.googlesource.com/24737501', 'googleplex-android-review.googlesource.com/24737502', 'googleplex-android-review.googlesource.com/24737503', 'googleplex-android-review.googlesource.com/24737504', 'googleplex-android-review.googlesource.com/24737505', 'googleplex-android-review.googlesource.com/24638916', 'googleplex-android-review.googlesource.com/24638579', 'googleplex-android-review.googlesource.com/23356997', 'googleplex-android-review.googlesource.com/24234506', 'googleplex-android-review.googlesource.com/24972364'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 3 months ago
- 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
- 5bfd817 Fix UAF in ~CallbackEnv by Brian Delwiche · 1 year, 5 months ago
- 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
- a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
- ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
- 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
- 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
- a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
- f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
- 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
- 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
- 9d74d4c Merge cherrypicks of ['googleplex-android-review.googlesource.com/23252652'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
- c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
- 48779ff Merge cherrypicks of ['googleplex-android-review.googlesource.com/24131190'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
- 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
- 4209fc3 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22900658', 'googleplex-android-review.googlesource.com/23152794', 'googleplex-android-review.googlesource.com/23152778', 'googleplex-android-review.googlesource.com/22726306', 'googleplex-android-review.googlesource.com/21609715', 'googleplex-android-review.googlesource.com/22581496'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
- d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
- b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
- 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
- 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
- d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
- 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
- bb6c888 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22316109'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
- ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
- 2d15008 Merge cherrypicks of ['googleplex-android-review.googlesource.com/22343125', 'googleplex-android-review.googlesource.com/22188831'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 9 months ago
- bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
- 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
- b900cad Merge cherrypicks of ['googleplex-android-review.googlesource.com/20657353', 'googleplex-android-review.googlesource.com/20606225', 'googleplex-android-review.googlesource.com/20617177', 'googleplex-android-review.googlesource.com/20617178', 'googleplex-android-review.googlesource.com/20995769'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 11 months ago
- 7e5f891 Fix an OOB bug in register_notification_rsp by Hui Peng · 2 years ago
- d44034f Add regression test for b/254774758 by Hui Peng · 2 years, 1 month ago
- d24a07f Add mocking support for now function in AttributionProcessor by Hui Peng · 2 years, 1 month ago
- 6a2e3c8 Fix a use-after-free bug in AttributionProcessor::OnWakelockReleased by Hui Peng · 2 years, 1 month ago
- 75e6645 Fix an OOB read in avdt_scb_hdl_pkt_no_frag by Hui Peng · 2 years, 1 month ago
- 986839b Merge cherrypicks of ['ag/20810842', 'ag/20657355', 'ag/20810318', 'ag/20813130'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years ago
- 1e27ef6 Fix an OOB write in SDP_AddAttribute by Hui Peng · 2 years ago
- 8d608f6 Fix an OOB access bug in A2DP_BuildMediaPayloadHeaderSbc by Hui Peng · 2 years, 1 month ago
- b6f74ca Fix an OOB Write bug in gatt_check_write_long_terminate by Hui Peng · 2 years, 1 month ago
- b77b03e Merge cherrypicks of ['ag/20416689', 'ag/20611095', 'ag/20068633'] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 1 month ago
- 4d51a09 Add bounds check in avdt_scb_act.cc by Brian Delwiche · 2 years, 3 months ago
- 0c19bbd Report failure when not able to connect to AVRCP by Robert Werthman · 2 years, 5 months ago
- 2fdc7b6 Fix OPP comparison by Brian Delwiche · 2 years, 2 months ago
- 4c8b771 Merge cherrypicks of [19500904, 19747499, 19747692, 19680038, 19698796, 20077612, 19943187, 19956048, 20058355, 20105077] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 3 months ago
- bb8740e Pass IRK rotation flag into native by Rahul Arya · 2 years, 3 months ago
- 0bb80e1 Add flag to toggle IRK rotation by Rahul Arya · 2 years, 3 months ago
- dc463a9 Reschedule address rotation after connection to advertising set by Rahul Arya · 2 years, 3 months ago
- ade8d7f Rotate advertising set addresses on IRK change by Rahul Arya · 2 years, 4 months ago
- 331b9de Fix URI check in BluetoothOppUtility.java by Brian Delwiche · 2 years, 3 months ago
- 8fffa0c Fix interger overflow when parsing avrc response by Keith Mok · 2 years, 4 months ago
- e5899fa Add length check when copy AVDT and AVCT packet by Keith Mok · 2 years, 4 months ago
- 8d867aa Add missing increment in bnep_api.cc by Brian Delwiche · 2 years, 5 months ago
- 41f6353 Added max buffer length check by Brian Delwiche · 2 years, 4 months ago
- 15a5c65 Add length check when copy AVDTP packet by Ted Wang · 2 years, 5 months ago
- c8d1ac8 Merge cherrypicks of [19625563, 19595932, 19612675] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 4 months ago
- a955d3b Add buffer in pin_reply in bluetooth.cc by Brian Delwiche · 2 years, 5 months ago
- 0dc8782 Add negative length check in process_service_search_rsp by Brian Delwiche · 2 years, 5 months ago
- 30178c6 Add local to pan_api.cc by Brian Delwiche · 2 years, 5 months ago
- ef40e7e Merge cherrypicks of [19588293, 19600909] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
- 2d6ac9f Merge cherrypicks of [17530926, 19500904] into security-aosp-tm-release. by Android Build Coastguard Worker · 2 years, 5 months ago
- c26dc0b Ignore calls to set the address policy after it has already been set by Rahul Sabnis · 2 years, 5 months ago
- ba29753 Reconfigure Address policy on last bond removed by Rahul Sabnis · 2 years, 5 months ago
- 9f563b2 Fix potential interger overflow when parsing vendor response by Ted Wang · 2 years, 9 months ago
- 4994089 Merge cherrypicks of [19203172] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- cea8f23 Added platform_compat_config to enable target sdk check by Etienne Ruffieux · 2 years, 6 months ago
- 5fc8a1d Merge cherrypicks of [19132091] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- dddf115 Do resolving list operations via handler by Chienyuan · 2 years, 6 months ago
- c97cda9 Merge cherrypicks of [19129326, 19129327] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- ce74739 BassClient: Force PA sync reset before removing source by xiaowang · 2 years, 6 months ago
- 02be37d BassClient: Fix issue that source could not be found by xiaowang · 2 years, 6 months ago
- bdb818e Merge cherrypicks of [19120567, 19120540, 19120541, 19120542, 19129144, 19129145] into tm-release. by Android Build Coastguard Worker · 2 years, 6 months ago
- 04b2b91 Revert "BassClient: Fix issue that source could not be found" by xiaowang · 2 years, 6 months ago
- 39b9602 Revert "BassClient: Force PA sync reset before removing source" by xiaowang · 2 years, 6 months ago
- 37f24e5 Revert "Revert "Immediately execute instead of queueing request ..." by Rahul Sabnis · 2 years, 6 months ago