November Patches #2
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bug: 225876506 Test: run supplied POC (updated to Android T) Tag: #security Ignore-AOSP-First: Security Change-Id: I0054806e47ed9d6eb8b034a41c8c872fee7f1eca (cherry picked from commit eac9616fc32f0bf40d2d2e6d1ff7b453edffc01c) Merged-In: I0054806e47ed9d6eb8b034a41c8c872fee7f1eca
Bug: 232023771 Test: make Tag: #security Ignore-AOSP-First: Security Change-Id: I68dd78c747eeafee5190dc56d7c71e9eeed08a5b Merged-In: I68dd78c747eeafee5190dc56d7c71e9eeed08a5b (cherry picked from commit a75b650a2a4b6b62be1ceb2040c598b0feb0dacb) Merged-In: I68dd78c747eeafee5190dc56d7c71e9eeed08a5b
Bug: 230867224 Test: Manual -- paired Bluetooth headset and played audio Tags: #security Ignore-AOSP-First: Security Change-Id: I740038288143715a1c06db781efd674b269a7f3e (cherry picked from commit 2992109ab975def57192c5e3d40078e69b1e8717) Merged-In: I740038288143715a1c06db781efd674b269a7f3e
Bug: 228450451 Test: manual, pair BT and play audio Tag: #security Ignore-AOSP-First: Security Change-Id: I681878508feae3d0526ed3e928af7a415e7d5c36 (cherry picked from commit 0fa54c7d8a2c061202e61d75b805661c1e89a76d) Merged-In: I681878508feae3d0526ed3e928af7a415e7d5c36
Previous fix for AVDT causing memory leak. And missing similar fix for AVCT packet. Bug: 232023771 Test: make Tag: #security Ignore-AOSP-First: Security Merged-In: Ifa8ed1cd9ea118acba78bdfdf6d5861fad254a90 Change-Id: Ifa8ed1cd9ea118acba78bdfdf6d5861fad254a90 (cherry picked from commit 62986e6a11a7340925d79c4282513aebc28da176) Merged-In: Ifa8ed1cd9ea118acba78bdfdf6d5861fad254a90
Convert min_len from 16 bits to 32 bits to avoid length checking overflow. Also, use calloc instead of malloc for list allocation since caller need to clean up string memory in the list items Bug: 242459126 Test: fuzz_avrc Tag: #security Ignore-AOSP-First: Security Merged-In: I7250509f2b320774926a8b24fd28828c5217d8a4 Change-Id: I7250509f2b320774926a8b24fd28828c5217d8a4 (cherry picked from commit a593687d6ad3978f48e2aa7be57d8239acdfa501) Merged-In: I7250509f2b320774926a8b24fd28828c5217d8a4
Bug: 111450156 Change-Id: Id23eeedcb7bde5866cd53a2f7f1c30f27c5352f6 (cherry picked from commit b0125caafec2183d73fc899ce5a8aee43a6e54af) (cherry picked from commit f349ff0c65523437b3f20ef54a7b0e5fd56364dc)
This change adds buffer length validation during the parsing of AVRCP browse commands. Change-Id: I3a6c7a9ea2323a04ce5c5368eabfa940a8152cba
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.