- aa35350 Merge tag 'android-security-13.0.0_r23' into staging/lineage-20.0_android-security-13.0.0_r23 by Kevin F. Haggerty · 7 weeks ago
- bf8e72c Merge tag 'android-security-13.0.0_r22' into staging/lineage-20.0_android-security-13.0.0_r22 by Kevin F. Haggerty · 3 months ago
- 5053e22 Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RES by Chienyuan · 2 years, 11 months ago
- ecc1446 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
- 3413e11 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
- e9534a1 Merge tag 'android-security-13.0.0_r21' into staging/lineage-20.0_android-security-13.0.0_r21 by Kevin F. Haggerty · 4 months ago
- fe486ae Merge tag 'android-security-13.0.0_r20' into staging/lineage-20.0_android-security-13.0.0_r20 by Kevin F. Haggerty · 5 months ago
- c291a63 RESTRICT AUTOMERGE Disallow unexpected incoming HID connections by Himanshu Rawat · 9 months ago
- df64d75 Merge tag 'android-security-13.0.0_r19' into staging/lineage-20.0_android-security-13.0.0_r19 by Kevin F. Haggerty · 6 months ago
- 1ef66c4 Disallow connect with key length downgrade by Brian Delwiche · 8 months ago
- bfc38f9 Disallow connect with Secure Connections downgrade by Brian Delwiche · 8 months ago
- 8c36bb8 Add support for checking security downgrade by Brian Delwiche · 8 months ago
- 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 8 months ago
- 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 8 months ago
- 57ace25 Merge tag 'android-security-13.0.0_r15' into staging/lineage-20.0_android-security-13.0.0_r15 by Kevin F. Haggerty · 10 months ago
- 52d9495 Merge tag 'android-security-13.0.0_r14' into staging/lineage-20.0_merge-android-security-13.0.0_r14 by Michael Bestas · 11 months ago
- c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 12 months ago
- 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
- f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 2 months ago
- 4ab2905 Merge tag 'android-security-13.0.0_r13' into staging/lineage-20.0_merge-android-security-13.0.0_r13 by Michael Bestas · 12 months ago
- f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
- 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
- 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 2 months ago
- 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 8 months ago
- bf57557 Merge tag 'android-security-13.0.0_r12' into staging/lineage-20.0_merge-android-security-13.0.0_r12 by Michael Bestas · 1 year, 1 month ago
- 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 7 months ago
- 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
- 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
- a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
- ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
- 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
- 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
- a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
- f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
- 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
- 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
- 106e1c4 Merge tag 'android-security-13.0.0_r10' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r10 by Kevin F. Haggerty · 1 year, 3 months ago
- dec408e Merge tag 'android-13.0.0_r75' into staging/lineage-20.0_merge-android-13.0.0_r75 by Michael Bestas · 1 year, 3 months ago
- bf9abb2 Merge tag 'android-security-13.0.0_r9' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r9 by Kevin F. Haggerty · 1 year, 3 months ago
- 8aa8aaa Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
- 37bb6d6 Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
- 83072e7 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
- 2995446 Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
- f91c35c Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
- 01681e8 btm: allow BTM_VSC_CHIP_CAPABILITY_RSP_LEN_M_RELEASE to be adjustable by Geel · 1 year, 4 months ago
- c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
- 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
- 2b932ba gd: hci: Allow disabling selected local commands by LuK1337 · 1 year, 5 months ago
- d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
- b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
- 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
- 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
- d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
- 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
- 28ebbc5 Merge tag 'android-13.0.0_r52' into staging/lineage-20.0_merge-android-13.0.0_r52 by Michael Bestas · 1 year, 7 months ago
- ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
- ec322f2 Merge tag 'android-13.0.0_r43' into staging/lineage-20.0_merge-android-13.0.0_r43 by Michael Bestas · 1 year, 8 months ago
- 2dd3426 audio_hal/aidl: Don't fallback to SW encoding when HW is supported by Hans Månsson · 2 years, 3 months ago
- 765595a Merge tag 'android-13.0.0_r41' into staging/lineage-20.0_merge-android-13.0.0_r41 by Michael Bestas · 1 year, 9 months ago
- bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
- 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
- 8eee9af Merge "Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state"" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
- 07961d0 Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state" by William Escande · 1 year, 9 months ago
- 759c673 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 am: 01d3e82a4f by Timothy Yiu · 1 year, 9 months ago
- 01d3e82 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 by Timothy Yiu · 1 year, 9 months ago
- e877981 Merge "Fix gatt_end_operation buffer overflow" into tm-dev by Timothy Yiu · 1 year, 9 months ago
- 1779227 Merge "Fix potential use after free in pan_api.cc" into tm-dev am: 003c3d2765 by Brian Delwiche · 1 year, 9 months ago
- 003c3d2 Merge "Fix potential use after free in pan_api.cc" into tm-dev by Brian Delwiche · 1 year, 9 months ago
- 9d6e514 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev am: bdcc9b8a28 by Brian Delwiche · 1 year, 9 months ago
- bdcc9b8 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev by Brian Delwiche · 1 year, 9 months ago
- 2f61784 Merge "RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues." into tm-qpr-dev by Jamin Liu · 1 year, 9 months ago
- a4815c1 RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues. by Jamin Liu · 1 year, 9 months ago
- 01e05e5 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 am: 124d2f9f62 by Brian Delwiche · 1 year, 9 months ago
- 124d2f9 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 by Brian Delwiche · 1 year, 9 months ago
- fd1d5e7 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev by Brian Delwiche · 1 year, 9 months ago
- c077ffb Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
- 7236e44 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
- 20b0392 Reject encryption drop in Common Criteria mode by Brian Delwiche · 2 years ago
- b9a1901 Merge "[BluetoothMetrics] Adding dependent changes for direct LE-ACL L2CAP fixed channel" into tm-qpr-dev by David Duarte · 1 year, 9 months ago
- 5773c86 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec am: 3c15759bc1 by Hui Peng · 1 year, 9 months ago
- 3c15759 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec by Hui Peng · 1 year, 9 months ago
- f173fcb Fix a OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 1 year, 11 months ago
- 01bcd53 [BluetoothMetrics] Adding dependent changes for by Palash Ahuja · 1 year, 9 months ago
- 78393ce Merge "[RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
- 73517ad Merge "[RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
- 585d258 [BluetoothMetrics] This covers the case for Direct LE-ACL Connection by Palash Ahuja · 1 year, 10 months ago
- c7b0b8a [RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc by Brian Delwiche · 2 years, 1 month ago
- 95ff995 [RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq by Brian Delwiche · 2 years ago
- 4a33fbc Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
- b4dd1a0 Merge "Only initiate Codec Negotation if locally supported." into tm-qpr-dev by William Escande · 1 year, 9 months ago
- ebcc232 Merge "Fix null pointer access in handle_rc_ctrl_features" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
- ff5f9d0 Only initiate Codec Negotation if locally supported. by Calvin On · 1 year, 10 months ago
- f6d2de2 Fix null pointer access in handle_rc_ctrl_features by Ugo Yu · 2 years, 4 months ago
- d005e6c Only add br_edr to power mode db by Chris Manton · 2 years ago
- faacd2d Merge "Set CE length to 0 in LE_Create_Connection" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
- c05bc8c Add property to disable APCF extended features by me-cafebabe · 1 year, 9 months ago
- 24d5d77 Always send BTA_DM_GATT_OVER_LE_RES_EVT by Rahul Arya · 1 year, 9 months ago
- 9c4880a Merge "BTM: Do not start authentication twice" into tm-qpr-dev by Myles Watson · 1 year, 10 months ago