1. fe486ae Merge tag 'android-security-13.0.0_r20' into staging/lineage-20.0_android-security-13.0.0_r20 by Kevin F. Haggerty · 5 months ago
  2. df64d75 Merge tag 'android-security-13.0.0_r19' into staging/lineage-20.0_android-security-13.0.0_r19 by Kevin F. Haggerty · 6 months ago
  3. 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 8 months ago
  4. 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 8 months ago
  5. 57ace25 Merge tag 'android-security-13.0.0_r15' into staging/lineage-20.0_android-security-13.0.0_r15 by Kevin F. Haggerty · 10 months ago
  6. 52d9495 Merge tag 'android-security-13.0.0_r14' into staging/lineage-20.0_merge-android-security-13.0.0_r14 by Michael Bestas · 11 months ago
  7. c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 12 months ago
  8. 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  9. 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  10. f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  11. 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 2 months ago
  12. 4ab2905 Merge tag 'android-security-13.0.0_r13' into staging/lineage-20.0_merge-android-security-13.0.0_r13 by Michael Bestas · 12 months ago
  13. f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  14. 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  15. 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 2 months ago
  16. 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 8 months ago
  17. bf57557 Merge tag 'android-security-13.0.0_r12' into staging/lineage-20.0_merge-android-security-13.0.0_r12 by Michael Bestas · 1 year, 1 month ago
  18. 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 7 months ago
  19. 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
  20. 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
  21. a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
  22. ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
  23. 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
  24. 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
  25. a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
  26. f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
  27. 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
  28. 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
  29. 106e1c4 Merge tag 'android-security-13.0.0_r10' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r10 by Kevin F. Haggerty · 1 year, 3 months ago
  30. dec408e Merge tag 'android-13.0.0_r75' into staging/lineage-20.0_merge-android-13.0.0_r75 by Michael Bestas · 1 year, 3 months ago
  31. bf9abb2 Merge tag 'android-security-13.0.0_r9' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r9 by Kevin F. Haggerty · 1 year, 3 months ago
  32. 8aa8aaa Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  33. 37bb6d6 Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  34. 83072e7 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  35. 2995446 Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  36. f91c35c Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  37. 01681e8 btm: allow BTM_VSC_CHIP_CAPABILITY_RSP_LEN_M_RELEASE to be adjustable by Geel · 1 year, 4 months ago
  38. c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
  39. 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
  40. 2b932ba gd: hci: Allow disabling selected local commands by LuK1337 · 1 year, 5 months ago
  41. d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  42. b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  43. 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  44. 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  45. d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  46. 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
  47. 28ebbc5 Merge tag 'android-13.0.0_r52' into staging/lineage-20.0_merge-android-13.0.0_r52 by Michael Bestas · 1 year, 7 months ago
  48. ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  49. ec322f2 Merge tag 'android-13.0.0_r43' into staging/lineage-20.0_merge-android-13.0.0_r43 by Michael Bestas · 1 year, 8 months ago
  50. 2dd3426 audio_hal/aidl: Don't fallback to SW encoding when HW is supported by Hans Månsson · 2 years, 3 months ago
  51. 765595a Merge tag 'android-13.0.0_r41' into staging/lineage-20.0_merge-android-13.0.0_r41 by Michael Bestas · 1 year, 9 months ago
  52. bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  53. 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  54. 8eee9af Merge "Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state"" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  55. 07961d0 Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state" by William Escande · 1 year, 9 months ago
  56. 759c673 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 am: 01d3e82a4f by Timothy Yiu · 1 year, 9 months ago
  57. 01d3e82 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 by Timothy Yiu · 1 year, 9 months ago
  58. e877981 Merge "Fix gatt_end_operation buffer overflow" into tm-dev by Timothy Yiu · 1 year, 9 months ago
  59. 1779227 Merge "Fix potential use after free in pan_api.cc" into tm-dev am: 003c3d2765 by Brian Delwiche · 1 year, 9 months ago
  60. 003c3d2 Merge "Fix potential use after free in pan_api.cc" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  61. 9d6e514 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev am: bdcc9b8a28 by Brian Delwiche · 1 year, 9 months ago
  62. bdcc9b8 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  63. 2f61784 Merge "RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues." into tm-qpr-dev by Jamin Liu · 1 year, 9 months ago
  64. a4815c1 RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues. by Jamin Liu · 1 year, 9 months ago
  65. 01e05e5 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 am: 124d2f9f62 by Brian Delwiche · 1 year, 9 months ago
  66. 124d2f9 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 by Brian Delwiche · 1 year, 9 months ago
  67. fd1d5e7 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  68. c077ffb Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  69. 7236e44 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  70. 20b0392 Reject encryption drop in Common Criteria mode by Brian Delwiche · 2 years ago
  71. b9a1901 Merge "[BluetoothMetrics] Adding dependent changes for direct LE-ACL L2CAP fixed channel" into tm-qpr-dev by David Duarte · 1 year, 9 months ago
  72. 5773c86 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec am: 3c15759bc1 by Hui Peng · 1 year, 9 months ago
  73. 3c15759 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec by Hui Peng · 1 year, 9 months ago
  74. f173fcb Fix a OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 1 year, 11 months ago
  75. 01bcd53 [BluetoothMetrics] Adding dependent changes for by Palash Ahuja · 1 year, 9 months ago
  76. 78393ce Merge "[RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
  77. 73517ad Merge "[RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
  78. 585d258 [BluetoothMetrics] This covers the case for Direct LE-ACL Connection by Palash Ahuja · 1 year, 10 months ago
  79. c7b0b8a [RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc by Brian Delwiche · 2 years, 1 month ago
  80. 95ff995 [RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq by Brian Delwiche · 2 years ago
  81. 4a33fbc Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  82. b4dd1a0 Merge "Only initiate Codec Negotation if locally supported." into tm-qpr-dev by William Escande · 1 year, 9 months ago
  83. ebcc232 Merge "Fix null pointer access in handle_rc_ctrl_features" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  84. ff5f9d0 Only initiate Codec Negotation if locally supported. by Calvin On · 1 year, 10 months ago
  85. f6d2de2 Fix null pointer access in handle_rc_ctrl_features by Ugo Yu · 2 years, 4 months ago
  86. d005e6c Only add br_edr to power mode db by Chris Manton · 2 years ago
  87. faacd2d Merge "Set CE length to 0 in LE_Create_Connection" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  88. c05bc8c Add property to disable APCF extended features by me-cafebabe · 1 year, 9 months ago
  89. 24d5d77 Always send BTA_DM_GATT_OVER_LE_RES_EVT by Rahul Arya · 1 year, 9 months ago
  90. 9c4880a Merge "BTM: Do not start authentication twice" into tm-qpr-dev by Myles Watson · 1 year, 10 months ago
  91. 8927a74 Merge "Re-log stack::btm::BTM_StartInquiry" into tm-qpr-dev by Chris Manton · 1 year, 10 months ago
  92. f1f07b0 BTM: Do not start authentication twice by Myles Watson · 1 year, 10 months ago
  93. a5f6a8e Set CE length to 0 in LE_Create_Connection by Ugo Yu · 1 year, 10 months ago
  94. 0cbe2ef Merge "Revert "Remove second action on tBTA_DM_PM_SPEC"" into tm-qpr-dev by David Duarte · 1 year, 10 months ago
  95. 094fdcc Re-log stack::btm::BTM_StartInquiry by Chris Manton · 1 year, 10 months ago
  96. 84b2637 Revert "Remove second action on tBTA_DM_PM_SPEC" by David Duarte · 1 year, 10 months ago
  97. be9e5b3 Merge tag 'android-13.0.0_r35' into staging/lineage-20.0_merge-android-13.0.0_r35 by Michael Bestas · 1 year, 10 months ago
  98. 51e1638 Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev am: b4a26774fb am: 8c11dc0552 by Brian Delwiche · 1 year, 10 months ago
  99. 8c11dc0 Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev am: b4a26774fb by Brian Delwiche · 1 year, 10 months ago
  100. b4a2677 Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev by Brian Delwiche · 1 year, 10 months ago