aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix an OOB Write bug in avrc_vendor_msgHEADt13.0Hui Peng2025-10-071-2/+13
* Fix OOB read in add_attrBrian Delwiche2025-07-091-0/+5
* Fix OOB read in bta_av_setconfig_rejBrian Delwiche2025-07-091-1/+1
* Fix authentication bypass bug in SMPBrian Delwiche2025-07-091-0/+10
* Fix type confusion in avdt_msg.ccBrian Delwiche2025-07-081-0/+8
* Backport regression fixes for 288144143Brian Delwiche2025-07-082-1/+37
* Fix UAF in sdp_discovery.ccBrian Delwiche2025-07-082-0/+22
* Use encrypted link for avdtp and avctp channelsBrian Delwiche2025-07-085-7/+13
* Reset permissions for not bonded deviceBrian Delwiche2025-02-211-0/+7
* RESTRICT AUTOMERGE backport "opp: validate that content uri belongs to curren...Billy Huang2025-02-211-0/+15
* Resolve incomplete fix for SMP authentication bypassBrian Delwiche2025-01-131-0/+11
* Fix OOB writes in gatt_sr.ccBrian Delwiche2024-12-301-0/+21
* Encrypt LE link immediately on reconnectionBrian Delwiche2024-12-301-0/+11
* Fix "GATT Read Multiple Variable Response" builderJakub Pawlowski2024-12-301-1/+1
* Fix OOB write in build_read_multi_rsp of gatt_sr.ccBrian Delwiche2024-12-302-0/+8
* Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RESChienyuan2024-11-181-1/+1
* RESTRICT AUTOMERGE Disallow unexpected incoming HID connectionsHimanshu Rawat2024-11-159-15/+170
* Disallow connect with key length downgradeBrian Delwiche2024-09-171-0/+14
* Disallow connect with Secure Connections downgradeBrian Delwiche2024-09-171-0/+17
* Add support for checking security downgradeBrian Delwiche2024-09-177-0/+184
* Fix heap-buffer overflow in sdp_utils.ccBrian Delwiche2024-08-271-2/+22
* Fix permission bypasses to multiple methodsBrian Delwiche2024-08-271-16/+16
* Fix an authentication bypass bug in SMPBrian Delwiche2024-08-262-0/+13
* Fix jni crash when get field of adTypeweidengke2024-03-121-1/+1
* Fix a security bypass issue in access_secure_service_from_temp_bondHui Peng2024-03-091-2/+1
* Reland: Fix an OOB write bug in attp_build_value_cmdHui Peng2024-03-091-11/+45
* Fix an OOB bug in smp_proc_sec_reqHui Peng2024-03-091-0/+7
* Revert "Fix an OOB write bug in attp_build_value_cmd"Mehmet Murat Sevim2024-02-151-44/+11
* Fix an OOB write bug in attp_build_value_cmdHui Peng2024-02-151-11/+44
* Fix an OOB write bug in attp_build_read_by_type_value_cmdHui Peng2024-02-151-1/+7
* Fix an OOB bug in btif_to_bta_response and attp_build_value_cmdHui Peng2024-02-151-2/+4
* Fix some OOB errors in BTM parsingBrian Delwiche2024-01-092-14/+54
* Fix timing attack in BTM_BleVerifySignatureBrian Delwiche2023-12-061-3/+4
* Fix UAF in ~CallbackEnvBrian Delwiche2023-12-061-0/+1
* Add bounds checks in btif_avrcp_audio_track.ccBrian Delwiche2023-12-061-3/+5
* Fix an OOB bug in parse_gap_dataHui Peng2023-12-061-0/+4
* Factor out duplicate code for parsing gap dataHui Peng2023-12-066-101/+85
* Enforce authentication if encryption is requiredHui Peng2023-12-061-4/+6
* Reorganize the code for checking auth requirementHui Peng2023-12-061-39/+56
* Reject access to secure service authenticated from a temp bonding [3]Hui Peng2023-12-061-4/+4
* Reject access to secure services authenticated from temp bonding [2]Hui Peng2023-12-061-0/+5
* Reject access to secure service authenticated from a temp bonding [1]Hui Peng2023-12-061-2/+33
* Fix multiple OOB bugs in btm_ble_gap.ccHui Peng2023-12-061-1/+27
* Fix an integer underflow in build_read_multi_rspHui Peng2023-10-071-15/+17
* Merge tag 'android-13.0.0_r75' of https://android.googlesource.com/platform/p...Julian Veit2023-09-262-3/+8
|\
| * Merge cherrypicks of ['googleplex-android-review.googlesource.com/23186010', ...Android Build Coastguard Worker2023-09-016-12/+32
| |\
| | * Fix UAF in gatt_cl.ccBrian Delwiche2023-09-011-1/+6
| | * Fix potential abort in btu_av_act.ccBrian Delwiche2023-09-011-1/+4
| | * Fix integer overflow in build_read_multi_rspBrian Delwiche2023-09-011-5/+12
| | * Fix an integer overflow bug in avdt_msg_asmblHui Peng2023-09-011-2/+2