1. aa35350 Merge tag 'android-security-13.0.0_r23' into staging/lineage-20.0_android-security-13.0.0_r23 by Kevin F. Haggerty · 7 weeks ago
  2. bf8e72c Merge tag 'android-security-13.0.0_r22' into staging/lineage-20.0_android-security-13.0.0_r22 by Kevin F. Haggerty · 3 months ago
  3. 5053e22 Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RES by Chienyuan · 2 years, 11 months ago
  4. ecc1446 Fix buffer overflow in BRSF by Brian Delwiche · 2 years, 2 months ago
  5. 3413e11 Harden array bounds validation by Brian Delwiche · 2 years, 1 month ago
  6. e9534a1 Merge tag 'android-security-13.0.0_r21' into staging/lineage-20.0_android-security-13.0.0_r21 by Kevin F. Haggerty · 4 months ago
  7. fe486ae Merge tag 'android-security-13.0.0_r20' into staging/lineage-20.0_android-security-13.0.0_r20 by Kevin F. Haggerty · 5 months ago
  8. c291a63 RESTRICT AUTOMERGE Disallow unexpected incoming HID connections by Himanshu Rawat · 9 months ago
  9. df64d75 Merge tag 'android-security-13.0.0_r19' into staging/lineage-20.0_android-security-13.0.0_r19 by Kevin F. Haggerty · 6 months ago
  10. 1ef66c4 Disallow connect with key length downgrade by Brian Delwiche · 8 months ago
  11. bfc38f9 Disallow connect with Secure Connections downgrade by Brian Delwiche · 8 months ago
  12. 8c36bb8 Add support for checking security downgrade by Brian Delwiche · 8 months ago
  13. 3e5374c Fix heap-buffer overflow in sdp_utils.cc by Brian Delwiche · 8 months ago
  14. 456f705 Fix an authentication bypass bug in SMP by Brian Delwiche · 8 months ago
  15. 57ace25 Merge tag 'android-security-13.0.0_r15' into staging/lineage-20.0_android-security-13.0.0_r15 by Kevin F. Haggerty · 10 months ago
  16. 52d9495 Merge tag 'android-security-13.0.0_r14' into staging/lineage-20.0_merge-android-security-13.0.0_r14 by Michael Bestas · 11 months ago
  17. c5c528b Fix a security bypass issue in access_secure_service_from_temp_bond by Hui Peng · 12 months ago
  18. 015c618 Reland: Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  19. 8d1f02a Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  20. f24536f Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  21. 7d0f696 Fix an OOB bug in smp_proc_sec_req by Hui Peng · 1 year, 2 months ago
  22. 4ab2905 Merge tag 'android-security-13.0.0_r13' into staging/lineage-20.0_merge-android-security-13.0.0_r13 by Michael Bestas · 12 months ago
  23. f0f3527 Revert "Fix an OOB write bug in attp_build_value_cmd" by Mehmet Murat Sevim · 1 year, 1 month ago
  24. 17044cc Fix an OOB write bug in attp_build_value_cmd by Hui Peng · 1 year, 4 months ago
  25. 1e6e0b5 Fix an OOB write bug in attp_build_read_by_type_value_cmd by Hui Peng · 1 year, 2 months ago
  26. 9c41dce Fix an OOB bug in btif_to_bta_response and attp_build_value_cmd by Hui Peng · 1 year, 8 months ago
  27. bf57557 Merge tag 'android-security-13.0.0_r12' into staging/lineage-20.0_merge-android-security-13.0.0_r12 by Michael Bestas · 1 year, 1 month ago
  28. 1d7ba7c Fix some OOB errors in BTM parsing by Brian Delwiche · 1 year, 7 months ago
  29. 495417b Fix timing attack in BTM_BleVerifySignature by Brian Delwiche · 1 year, 6 months ago
  30. 243fdf1 Add bounds checks in btif_avrcp_audio_track.cc by Brian Delwiche · 1 year, 7 months ago
  31. a218e5b Fix an OOB bug in parse_gap_data by Hui Peng · 1 year, 4 months ago
  32. ea81185 Factor out duplicate code for parsing gap data by Hui Peng · 1 year, 4 months ago
  33. 5673b3c Enforce authentication if encryption is required by Hui Peng · 1 year, 4 months ago
  34. 9194524 Reorganize the code for checking auth requirement by Hui Peng · 1 year, 4 months ago
  35. a99edb3 Reject access to secure service authenticated from a temp bonding [3] by Hui Peng · 1 year, 4 months ago
  36. f4e439c Reject access to secure services authenticated from temp bonding [2] by Hui Peng · 1 year, 4 months ago
  37. 25a7d9a Reject access to secure service authenticated from a temp bonding [1] by Hui Peng · 1 year, 4 months ago
  38. 7b30443 Fix multiple OOB bugs in btm_ble_gap.cc by Hui Peng · 1 year, 8 months ago
  39. 106e1c4 Merge tag 'android-security-13.0.0_r10' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r10 by Kevin F. Haggerty · 1 year, 3 months ago
  40. dec408e Merge tag 'android-13.0.0_r75' into staging/lineage-20.0_merge-android-13.0.0_r75 by Michael Bestas · 1 year, 3 months ago
  41. bf9abb2 Merge tag 'android-security-13.0.0_r9' of https://android.googlesource.com/platform/packages/modules/Bluetooth into staging/lineage-20.0_merge_android-security-13.0.0_r9 by Kevin F. Haggerty · 1 year, 3 months ago
  42. 8aa8aaa Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  43. 37bb6d6 Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  44. 83072e7 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  45. 2995446 Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  46. f91c35c Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  47. 01681e8 btm: allow BTM_VSC_CHIP_CAPABILITY_RSP_LEN_M_RELEASE to be adjustable by Geel · 1 year, 4 months ago
  48. c0151aa Fix an integer underflow in build_read_multi_rsp by Hui Peng · 1 year, 8 months ago
  49. 319278a Revert "Fix a type confusion bug in bta_av_setconfig_rej" by Hui Peng · 1 year, 5 months ago
  50. 2b932ba gd: hci: Allow disabling selected local commands by LuK1337 · 1 year, 5 months ago
  51. d03a302 Fix UAF in gatt_cl.cc by Brian Delwiche · 1 year, 9 months ago
  52. b7ea57f Fix potential abort in btu_av_act.cc by Brian Delwiche · 1 year, 10 months ago
  53. 8770c07 Fix integer overflow in build_read_multi_rsp by Brian Delwiche · 1 year, 8 months ago
  54. 668bbca Fix an integer overflow bug in avdt_msg_asmbl by Hui Peng · 1 year, 8 months ago
  55. d8d9529 Fix multiple OOB bugs resulted from tx mtu in EATT by Hui Peng · 1 year, 8 months ago
  56. 24a10ec Fix a type confusion bug in bta_av_setconfig_rej by Hui Peng · 1 year, 8 months ago
  57. 28ebbc5 Merge tag 'android-13.0.0_r52' into staging/lineage-20.0_merge-android-13.0.0_r52 by Michael Bestas · 1 year, 7 months ago
  58. ec573bc Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  59. ec322f2 Merge tag 'android-13.0.0_r43' into staging/lineage-20.0_merge-android-13.0.0_r43 by Michael Bestas · 1 year, 8 months ago
  60. 2dd3426 audio_hal/aidl: Don't fallback to SW encoding when HW is supported by Hans Månsson · 2 years, 3 months ago
  61. 765595a Merge tag 'android-13.0.0_r41' into staging/lineage-20.0_merge-android-13.0.0_r41 by Michael Bestas · 1 year, 9 months ago
  62. bb45831 Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  63. 505d202 Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  64. 8eee9af Merge "Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state"" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  65. 07961d0 Revert "Handle AVDT_SCB_HDL_TC_CLOSE in avdt_scb idle state" by William Escande · 1 year, 9 months ago
  66. 759c673 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 am: 01d3e82a4f by Timothy Yiu · 1 year, 9 months ago
  67. 01d3e82 Merge "Fix gatt_end_operation buffer overflow" into tm-dev am: e8779817c0 by Timothy Yiu · 1 year, 9 months ago
  68. e877981 Merge "Fix gatt_end_operation buffer overflow" into tm-dev by Timothy Yiu · 1 year, 9 months ago
  69. 1779227 Merge "Fix potential use after free in pan_api.cc" into tm-dev am: 003c3d2765 by Brian Delwiche · 1 year, 9 months ago
  70. 003c3d2 Merge "Fix potential use after free in pan_api.cc" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  71. 9d6e514 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev am: bdcc9b8a28 by Brian Delwiche · 1 year, 9 months ago
  72. bdcc9b8 Merge "Revert "Revert "Validate buffer length in sdpu_build_uuid_seq""" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  73. 2f61784 Merge "RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues." into tm-qpr-dev by Jamin Liu · 1 year, 9 months ago
  74. a4815c1 RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues. by Jamin Liu · 1 year, 9 months ago
  75. 01e05e5 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 am: 124d2f9f62 by Brian Delwiche · 1 year, 9 months ago
  76. 124d2f9 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e7145 by Brian Delwiche · 1 year, 9 months ago
  77. fd1d5e7 Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev by Brian Delwiche · 1 year, 9 months ago
  78. c077ffb Fix OOB read in btm_ble_periodic_av_sync_lost by Brian Delwiche · 1 year, 9 months ago
  79. 7236e44 Fix gatt_end_operation buffer overflow by tyiu · 1 year, 9 months ago
  80. 20b0392 Reject encryption drop in Common Criteria mode by Brian Delwiche · 2 years ago
  81. b9a1901 Merge "[BluetoothMetrics] Adding dependent changes for direct LE-ACL L2CAP fixed channel" into tm-qpr-dev by David Duarte · 1 year, 9 months ago
  82. 5773c86 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec am: 3c15759bc1 by Hui Peng · 1 year, 9 months ago
  83. 3c15759 Fix a OOB bug in bta_hh_co_get_rpt_rsp am: f173fcb4ec by Hui Peng · 1 year, 9 months ago
  84. f173fcb Fix a OOB bug in bta_hh_co_get_rpt_rsp by Hui Peng · 1 year, 11 months ago
  85. 01bcd53 [BluetoothMetrics] Adding dependent changes for by Palash Ahuja · 1 year, 9 months ago
  86. 78393ce Merge "[RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
  87. 73517ad Merge "[RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc" into tm-qpr-dev by Brian Delwiche · 1 year, 9 months ago
  88. 585d258 [BluetoothMetrics] This covers the case for Direct LE-ACL Connection by Palash Ahuja · 1 year, 10 months ago
  89. c7b0b8a [RESTRICT AUTOMERGE] Fix potential use after free in pan_api.cc by Brian Delwiche · 2 years, 1 month ago
  90. 95ff995 [RESTRICT AUTOMERGE] Validate buffer length in sdpu_build_uuid_seq by Brian Delwiche · 2 years ago
  91. 4a33fbc Revert "Revert "Validate buffer length in sdpu_build_uuid_seq"" by Brian Delwiche · 1 year, 9 months ago
  92. b4dd1a0 Merge "Only initiate Codec Negotation if locally supported." into tm-qpr-dev by William Escande · 1 year, 9 months ago
  93. ebcc232 Merge "Fix null pointer access in handle_rc_ctrl_features" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  94. ff5f9d0 Only initiate Codec Negotation if locally supported. by Calvin On · 1 year, 10 months ago
  95. f6d2de2 Fix null pointer access in handle_rc_ctrl_features by Ugo Yu · 2 years, 4 months ago
  96. d005e6c Only add br_edr to power mode db by Chris Manton · 2 years ago
  97. faacd2d Merge "Set CE length to 0 in LE_Create_Connection" into tm-qpr-dev by TreeHugger Robot · 1 year, 9 months ago
  98. c05bc8c Add property to disable APCF extended features by me-cafebabe · 1 year, 9 months ago
  99. 24d5d77 Always send BTA_DM_GATT_OVER_LE_RES_EVT by Rahul Arya · 1 year, 9 months ago
  100. 9c4880a Merge "BTM: Do not start authentication twice" into tm-qpr-dev by Myles Watson · 1 year, 10 months ago