|
|
|
|
|
Hello, Kinbay, Could you please check it? Thank you. Sangmin Choi. |
|
|
Update some infomation CVE-2023-21273 Detail: Vendor Advisory: https://source.android.com/security/bulletin/2023-08-01 Patch: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1e27ef69755a0735278a1c6af130c71a92b94e3f ------------------ Fix an OOB write in SDP_AddAttribute When the `attr_pad` becomes full, it is possible that un index of `-1` is computed write a zero byte to `p_val`, rusulting OOB write. ``` p_val[SDP_MAX_PAD_LEN - p_rec->free_pad_ptr - 1] = '\0'; ``` Bug: 261867748 Test: manual Tag: #security Ignore-AOSP-First: security Merged-In: I937d22a2df26fca1d7f06b10182c4e713ddfed1b Change-Id: I937d22a2df26fca1d7f06b10182c4e713ddfed1b (cherry picked from commit 0846b5b746e844464fb728478fea3c2ad6aaef1f) Merged-In: I937d22a2df26fca1d7f06b10182c4e713ddfed1b ------------------ |
|
|
Hi Choi Update some info that we discussed yesterday. BTS can't detect the 2023-08-01 security patch in this build image. The patch is already committed when the 2023-03-01 security bulletin on the project source code The patch is duplicated so there is no commit when the 2023-08-01 Best Regards Kinbay |
|
|
Hi Choi I ask the warning situation to 3PL. And their feedback that the situation can be waived by submitting a form (as below) to 3PL. Also need provide a code snippet to prove that you have applied this patch. == Required Information == Build fingerprint: AFAP link: (If available) Failure type (PHA, Patch analyzer, INFO, etc): Description of failure: Related CVE (if applicable): == Justification == Why the ticket being created: == Additional Information and Justification== Why the ticket being created: Additional Info: Best Regards Kinbay |
|
|
Hello, Kinbay, The fingerprint is SKB/BFX_AT100/BFX-AT100:12/STTC.220724.001/15.542.65-20240603:user/release-keys. If you need more information from me, please let me know. Thank you. Sangmin Chio. |
|
|
Hello, Kinbay, I don't want to submit 15.542.65 firmware. Is the BTS tool going to be fixed later? If yes, we can close this ticket now. Thank you. Sanmgin Choi. |
|
|
Hello, Kinbay, There is CVE-2023-21273 warning in 15.542.64 BTS. Close this issue. Thank you. Sangmin Choi. 15.542.64_BTS.png (259,654 bytes) |
- yk.jung ( (ALTech) Younkwang Jung ) developer
