summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* resolve merge conflicts of ec78d74706c3e81f91eee53e3d9f959f66e5d77f to pi-devHEADreplicant-6.0-0004-transitionreplicant-6.0-0004-rc6replicant-6.0-0004-rc5-transitionreplicant-6.0-0004-rc5replicant-6.0-0004-rc4replicant-6.0-0004-rc3replicant-6.0-0004-rc2replicant-6.0-0004cm-13.0Hansong Zhang2019-07-072-10/+37
* btm_proc_smp_cback: Don't access p_dev_rec if freedHansong Zhang2019-07-071-0/+7
* Fix potential usage of freed memory in btif_hl_proc_sdp_query_cfmJakub Pawlowski2019-03-232-7/+6
* Fix buffer overflow in btif_dm_data_copyJakub Pawlowski2019-03-232-50/+44
* HFP: Check AT command buffer boundary during parsingChienyuan2019-02-105-22/+54
* SDP: Check p_end in save_attr_seq and add_attrMyles Watson2019-02-101-13/+20
* Fix possible OOB when AVDT data channel recive ACL dataUgo Yu2019-02-101-3/+57
* MCAP: Check response length in mca_ccb_hdl_rspMyles Watson2019-02-031-3/+17
* HH: Check parameter length in bta_hh_ctrl_dat_actMyles Watson2019-02-031-0/+8
* Fix possible OOB readJakub Pawlowski2019-01-131-0/+11
* Check data length when parsing AVRCP vendor specific command responsesPavlin Radoslavov2019-01-131-1/+34
* Check AVRCP data length when parsing inside avrc_ctrl_pars_vendor_rsp()Pavlin Radoslavov2019-01-131-4/+49
* Checks the SMP length to fix OOB readCheney Ni2018-11-181-1/+19
* Add packet length check in smp_proc_master_idUgo Yu2018-11-181-0/+10
* DO NOT MERGE Fix OOB read before buffer length checkUgo Yu2018-11-181-1/+8
* Check packet length in bta_av_proc_meta_cmdChienyuan2018-11-181-1/+8
* Add missing AVRCP message length checks inside avrc_msg_cbackPavlin Radoslavov2018-11-181-6/+34
* Add packet length checks in mca_ccb_hdl_reqCheney Ni2018-11-181-1/+11
* Fix a wrong check in rfc_parse_dataHansong Zhang2018-11-181-1/+1
* Add bound check for rfc_parse_dataHansong Zhang2018-11-182-8/+13
* Check remaining frame length in rfc_process_mx_messageHansong Zhang2018-11-181-0/+27
* Fix copy length calculation in sdp_copy_raw_dataJakub Pawlowski2018-11-181-0/+8
* Fix OOB read in avrc_ctrl_pars_vendor_rspHansong Zhang2018-11-181-0/+8
* Don't use Address after it was deletedJakub Pawlowski2018-11-173-24/+30
* DO NOT MERGE HFP: Fix out of bound access in phone number processingJack He2018-11-171-4/+21
* HID Host: Check L2CAP packet data lengthHansong Zhang2018-10-221-0/+9
* Fix OOB read in process_l2cap_cmdHansong Zhang2018-10-221-0/+1
* DO NOT MERGE: SDP: Recalculate param_len after max_list_lenMyles Watson2018-10-221-0/+1
* SDP: return error on offset bigger than atribute lengthJakub Pawlowski2018-10-221-0/+14
* Add packet length checks in l2cble_process_sig_cmdJakub Pawlowski2018-10-221-0/+36
* Add bounds check to l2cble_process_sig_cmd L2CAP_CMD_DISC_REQAjay Panicker2018-10-221-0/+5
* Add PDU size checks in process_service_search_attr_rspJakub Pawlowski2018-09-091-0/+14
* GATT: Handle too short Error Response PDUJakub Pawlowski2018-09-091-3/+19
* RESTRICT AUTOMERGE: Fixes two bluetooth causing remote overreads (2/2)akirilov2018-08-081-1/+6
* Add checks whether the AVDTP element data length is validPavlin Radoslavov2018-08-081-0/+11
* RESTRICT AUTOMERGE: Fixes two bluetooth bugs causing remote overreads (1/2)akirilov2018-08-081-1/+1
* BNEP: Fix OOB access in bnep_data_indJack He2018-08-081-9/+26
* Decrease length after reading from array in process_service_attr_reqJakub Pawlowski2018-08-081-0/+2
* DO NOT MERGE SMP: Check p_cb->role in smp_br_state_machine_eventHansong Zhang2018-08-081-0/+7
* DO NOT MERGE Prevent stack overflow in btif_storagereplicant-6.0-0004-rc1Hansong Zhang2018-07-161-0/+4
* DO NOT MERGE Fix unexpected behavior in smp_sm_eventHansong Zhang2018-07-161-0/+8
* DO NOT MERGE Fix OOB read in process_l2cap_cmdHansong Zhang2018-06-081-0/+104
* DO NOT MERGE Handle bad packet length in gatts_process_read_reqStanley Tng2018-06-081-0/+16
* DO NOT MERGE Add bounds check for BNEP_WriteHansong Zhang2018-06-081-0/+9
* PAN: Always allocate in bta_pan_data_buf_ind_cbackMyles Watson2018-06-083-39/+21
* DO NOT MERGE Fix unexpected behavior in bta_dm_sdp_resultHansong Zhang2018-06-081-5/+16
* SDP: Check p_req_end before reading from p_reqMyles Watson2018-04-142-26/+68
* DO NOT MERGE Truncate new line characters when adding string to configHansong Zhang2018-04-141-2/+25
* AVRCP: Check the number of text value attributes requestedAjay Panicker2018-04-061-0/+5
* BNEP: Check received frame typeMyles Watson2018-03-301-0/+7