<feed xmlns='http://www.w3.org/2005/Atom'>
<title>android_system_bt/stack/btm, branch cm-13.0</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/'/>
<entry>
<title>btm_proc_smp_cback: Don't access p_dev_rec if freed</title>
<updated>2019-07-07T12:40:23+00:00</updated>
<author>
<name>Hansong Zhang</name>
<email>hsz@google.com</email>
</author>
<published>2019-01-10T02:18:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=3d34ee18a6b5e16ddf77157103a1c3cc5a777d3b'/>
<id>3d34ee18a6b5e16ddf77157103a1c3cc5a777d3b</id>
<content type='text'>
In btm_proc_smp_cback(), return after p_dev_rec is freed in the middle
to prevent use after free

Bug: 120612744
Test: Use ASAN build; connect to a LE device and wait for timeout
Change-Id: Ic9d0eaeb62a1a1b24884146ca82f4104fabc5bac
(cherry picked from commit 953dd279502980b1d8d30656eb78c6445a6e31f7)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In btm_proc_smp_cback(), return after p_dev_rec is freed in the middle
to prevent use after free

Bug: 120612744
Test: Use ASAN build; connect to a LE device and wait for timeout
Change-Id: Ic9d0eaeb62a1a1b24884146ca82f4104fabc5bac
(cherry picked from commit 953dd279502980b1d8d30656eb78c6445a6e31f7)
</pre>
</div>
</content>
</entry>
<entry>
<title>Don't use Address after it was deleted</title>
<updated>2018-11-17T15:53:12+00:00</updated>
<author>
<name>Jakub Pawlowski</name>
<email>jpawlowski@google.com</email>
</author>
<published>2018-07-11T09:57:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=9c9fa769cc610a6e9ebaadda8b3ddc49aa537aee'/>
<id>9c9fa769cc610a6e9ebaadda8b3ddc49aa537aee</id>
<content type='text'>
Bug: 110216173
(cherry picked from commit 9930f6f4e14e64966869b119994126283d645fd0)

Change-Id: Id3364cf53153eafed478546d7347ed1673217e91
Backported-By: Vasyl Gello &lt;vasek.gello@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 110216173
(cherry picked from commit 9930f6f4e14e64966869b119994126283d645fd0)

Change-Id: Id3364cf53153eafed478546d7347ed1673217e91
Backported-By: Vasyl Gello &lt;vasek.gello@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Check LE advertising data length before caching advertising records</title>
<updated>2017-06-09T08:43:39+00:00</updated>
<author>
<name>Jack He</name>
<email>siyuanh@google.com</email>
</author>
<published>2017-04-06T00:59:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=27eaaa6e0a490c357411196938a913c958020b39'/>
<id>27eaaa6e0a490c357411196938a913c958020b39</id>
<content type='text'>
Bug: 33899337
Test: make, receive LE advertising
AOSP-Change-Id: I06b249ac5cabdef64528deda07b8bae749e1d2fd
(cherry picked from commit d57adbc350fdee4f27b82c9e39a14bd745d92320)
(cherry picked from commit 1bef3546a6cb6f05739c10825dab9eb3362892f6)

CVE-2017-0646

Change-Id: I02f408e5fe354434aa39a2c7f1a17b67e1e38193
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 33899337
Test: make, receive LE advertising
AOSP-Change-Id: I06b249ac5cabdef64528deda07b8bae749e1d2fd
(cherry picked from commit d57adbc350fdee4f27b82c9e39a14bd745d92320)
(cherry picked from commit 1bef3546a6cb6f05739c10825dab9eb3362892f6)

CVE-2017-0646

Change-Id: I02f408e5fe354434aa39a2c7f1a17b67e1e38193
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge tag 'android-6.0.1_r24' into HEAD</title>
<updated>2016-04-05T19:31:54+00:00</updated>
<author>
<name>Jessica Wagantall</name>
<email>jwagantall@cyngn.com</email>
</author>
<published>2016-04-05T19:31:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=c64071a6ac406d383aa016f6bb1434affe9321b2'/>
<id>c64071a6ac406d383aa016f6bb1434affe9321b2</id>
<content type='text'>
Ticket: CYNGNOS-2213
Android 6.0.1 release 24
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Ticket: CYNGNOS-2213
Android 6.0.1 release 24
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'LA.BF.1.1.3_rb1.11' of git://codeaurora.org/platform/system/bt into cm-13.0</title>
<updated>2016-03-30T18:50:17+00:00</updated>
<author>
<name>Steve Kondik</name>
<email>steve@cyngn.com</email>
</author>
<published>2016-03-30T18:50:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=ef167667a4496d4717c7efd06c1bb076c708b9ee'/>
<id>ef167667a4496d4717c7efd06c1bb076c708b9ee</id>
<content type='text'>
Change-Id: Ib0f8f87bd5655ce85227bfc016044b1daa09ebe7
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Change-Id: Ib0f8f87bd5655ce85227bfc016044b1daa09ebe7
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge tag 'android-6.0.1_r22' of https://android.googlesource.com/platform/system/bt into cm-13.0</title>
<updated>2016-03-12T01:01:09+00:00</updated>
<author>
<name>Steve Kondik</name>
<email>steve@cyngn.com</email>
</author>
<published>2016-03-11T12:05:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=718ba0bd6de6a0f4b8c63f0146f8978981eb5cb4'/>
<id>718ba0bd6de6a0f4b8c63f0146f8978981eb5cb4</id>
<content type='text'>
Android 6.0.1 release 22

Change-Id: I2e682780163afc7e9c88865192a6342027c80586
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Android 6.0.1 release 22

Change-Id: I2e682780163afc7e9c88865192a6342027c80586
</pre>
</div>
</content>
</entry>
<entry>
<title>DO NOT MERGE Remove Porsche car-kit pairing workaround</title>
<updated>2016-03-01T23:27:05+00:00</updated>
<author>
<name>Andre Eisenbach</name>
<email>eisenbach@google.com</email>
</author>
<published>2016-02-04T21:19:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=388db89341c81cf97cd2d39d60fc86539e460b71'/>
<id>388db89341c81cf97cd2d39d60fc86539e460b71</id>
<content type='text'>
Bug: 26551752
Change-Id: I14c5e3fcda0849874c8a94e48aeb7d09585617e1
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Bug: 26551752
Change-Id: I14c5e3fcda0849874c8a94e48aeb7d09585617e1
</pre>
</div>
</content>
</entry>
<entry>
<title>btm: Fix compile with BLE disabled (again)</title>
<updated>2016-01-20T23:15:11+00:00</updated>
<author>
<name>Michael Bestas</name>
<email>mikeioannina@cyanogenmod.org</email>
</author>
<published>2016-01-20T23:15:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=b2f946e4fff22604d638b24147534159d61b98af'/>
<id>b2f946e4fff22604d638b24147534159d61b98af</id>
<content type='text'>
* Broken in d4cd18182d0868a1018436f8e917f5580abdc1fa

Change-Id: If56e31914e8e9742e720c35ac3ec449aafdb3142
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* Broken in d4cd18182d0868a1018436f8e917f5580abdc1fa

Change-Id: If56e31914e8e9742e720c35ac3ec449aafdb3142
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'LA.BF.1.1.3_rb1.8' of git://codeaurora.org/platform/system/bt into cm-13.0</title>
<updated>2016-01-19T08:48:00+00:00</updated>
<author>
<name>Steve Kondik</name>
<email>steve@cyngn.com</email>
</author>
<published>2016-01-19T08:48:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=d4cd18182d0868a1018436f8e917f5580abdc1fa'/>
<id>d4cd18182d0868a1018436f8e917f5580abdc1fa</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Bluetooth: GAP: Update Paging and inquiry busy level seperately</title>
<updated>2016-01-18T06:07:39+00:00</updated>
<author>
<name>Srinu Jella</name>
<email>sjella@codeaurora.org</email>
</author>
<published>2013-12-17T14:17:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.replicant.us/mirrors/LineageOS/android_system_bt/commit/?id=e2f427903d92f1377eefd4c7d7f2b5281cbe52bd'/>
<id>e2f427903d92f1377eefd4c7d7f2b5281cbe52bd</id>
<content type='text'>
While updating the busy level of Paging or inquiry '10' was
used as BL for paging and inquiry,this leads to ignore the
one of them when both of them are active.

Made unique busy level for paging related events and inquiry
related events, so that each event will be notified.

Change-Id: I7bddcb4901061c450555235717b7d49bab922ae8
CRs-Fixed: 960897
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
While updating the busy level of Paging or inquiry '10' was
used as BL for paging and inquiry,this leads to ignore the
one of them when both of them are active.

Made unique busy level for paging related events and inquiry
related events, so that each event will be notified.

Change-Id: I7bddcb4901061c450555235717b7d49bab922ae8
CRs-Fixed: 960897
</pre>
</div>
</content>
</entry>
</feed>
