[automerger skipped] Merge "Import translations. DO NOT MERGE ANYWHERE" into tm-qpr-dev am: 89e28b8d -s ours

am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22391303



Change-Id: I8139cd19a345dffd77118f3cf9c1062d6a0eeaaa
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22391303



Change-Id: I4be05a5ec9fd045aada823cd813881a338cd5f78
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Merge "RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues." into tm-qpr-dev am: 2f61784f

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22368902



Change-Id: I741ffa3da87dd4cd55ecdbb3c73033776b285d14
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues. am: a4815c16

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22368902



Change-Id: I8ba13cf1575094e74505ed263913964b0c921548
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Merge "RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues." into tm-qpr-dev

[automerger skipped] Merge "BluetoothMetrics: Upload readable sha256, instead of bytes" into tm-qpr-dev am: 69bf6d7e -s ours

am skip reason: Merged-In Ica31ffcc22d5a75aa82b9e2f91b9239d63506a40 with SHA-1 0ec04568 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22236384



Change-Id: I0f82e06575f77853048aaf1fa123cda936522374
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

[automerger skipped] BluetoothMetrics: Upload readable sha256, instead of bytes am: c34a20b5 -s ours

am skip reason: Merged-In Ica31ffcc22d5a75aa82b9e2f91b9239d63506a40 with SHA-1 0ec04568 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22236384



Change-Id: I423b48d39395bf0568250e88b0c80484950228c4
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Auto-generated-cl: translation import
Change-Id: I8b62d67e327fc7ac6e98c481c161a21fccb44fc2

RESTRICT AUTOMERGE: Move BMW Carkit(9c:df:03) into IOP table to only use AVRCP 1.3 from 1.4 to resolve interop issues.

Bug: 272518730
Bug: 234548635
Tag: #compatibility
Test: Manual. Refer: go/bmw-x5-car-kit-audio
Ignore-AOSP-First: This change is the tm version of aosp/2514656
Merged-In: Ia3216810f2814b10218981e9ecbe962bfc5e6754
Change-Id: Ibc4ebe01f3d408c72a4d8b9c36118cf0acc7d655

Merge "Fix OOB read in btm_ble_periodic_av_sync_lost" into tm-dev am: fd1d5e71 am: 124d2f9f am: 01e05e53

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22343125



Change-Id: I584160db39745bad0dd9b042e1a5b97bafe3e870
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22343125



Change-Id: I4a333da79dedbfe03b0c6b8253cdf1839f7bd57a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22343125



Change-Id: Ib71e4715f6bf6c5f2c7954d06b1fd5e175df33b9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22343125



Change-Id: Idb373087e5ebeaf547f6c758ea66dc6a29533de3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

tm-mainline-prod has 2.3.3 version, use 3.2.23 on aosp/master.
This is for integration with UWB.

Tag: #feature
Bug: 228306436
Test: atest pdl_tests pdl_rust_generator_tests_{le,be}
Merged-In: Ib242d348a845f05a56edf45101e1b5d6ed291893
Change-Id: Id9b4fdcc45ac5813832c437cbe0eed4890c27841
(cherry picked from commit 45151b4a)

btm_ble_periodic_av_sync_lost internally calls the function
btm_ble_get_psync_index_from_handle, which polls the internal periodic
sync buffer and returns a matching index if one exists.  If no matching
handle is found, it returns MAX_SYNC_TRANSACTION.

However, here the calling function lacks the check for this case present
in similar functions.  If no handle is matched, it will attempt to index
the buffer with MAX_SYNC_TRANSACTION, which will overrun it by a single
width and lead to OOB access.

Add handling for this case.

Bug: 273502002
Test: atest bluetooth_test_gd_unit, atest net_test_stack_btm, validated
against researcher POC
Tag: #security
Ignore-AOSP-First: Security

Change-Id: I2e1e95b277f81b2668f721a7693df50841968ec5

Add and get audio codec priorities from the property below
bluetooth.pairing_ui_package.name

Bug: 270032693
Test: manually test in local build
(cherry picked from https://android-review.googlesource.com/q/commit:9687c012d1f4ddf9d6a008650c01eb249764f9e0)
Merged-In: I359dba7eae531053653caa69eaf0cd6353255833
Change-Id: I359dba7eae531053653caa69eaf0cd6353255833
Bug: 263323082

Upstream Class Of Device informationi to btm when getting connection_request packet.

(cherry picked from https://android-review.googlesource.com/q/commit:3bc96838a9737746adee79659580291057a56d36)

Dirty cherry-pick because of OnConnectFail that has different parameters

Bug: 263208623
Test: atest GoogleBluetoothInstrumentationTests
Tag: #gd-refactor
Bug: 263323082
Change-Id: I46c54d22f624d677d599c37a085474fcc3474453
Merged-In: I4c307f53a1346836cb228c0018f9720472cfbeeb

The ‘parse_inner’ method should only be called if the payload actually
conforms to the expected size of the packet. We might be able to make
this API prettier in the future to avoid this danger.

Tag: #feature
Bug: 274623973
Test: atest pdl_tests pdl_rust_generator_tests_{le,be}
(cherry picked from https://android-review.googlesource.com/q/commit:a36b8ce03646fc9a4fc798beb5e893554890183f)
Merged-In: I4144f50cbc7b55a97bc10ef527db654218c63173
Change-Id: I4144f50cbc7b55a97bc10ef527db654218c63173

Manual revert as the revert commit does not apply cleanly.
Fix additional clippy warnings.

Test: cargo build
Change-Id: I85b1163855bb6e88c390bcca81e0baa49477727a
Merged-In: Idfbf269d253f93786a63ebdb810c6200da0d2c45

Remove group inlining in the linter, now performed in
the analyzer. Remove PacketScope members 'fields',
'constraints', which can now be derived from the
packet declaration itself.

Test: cargo test
Change-Id: Ic9bad86c0395b6e9315d2ed2d10e9f8640ea3648
Merged-In: Ic9bad86c0395b6e9315d2ed2d10e9f8640ea3648
(cherry picked from commit 1ff1141d)

The rust backend previously used the parser ast for the generation,
along with the legacy linter scope. This change migrates the generator
code to the analyzer ast while still using the legacy linter scope.

This will enable further code removal in the legacy linter as
the analyzer already inlines the group declarations.

Test: cargo test
Change-Id: Ic205b6a1452cd15d2dfd50c578c751a0245ee63f
Merged-In: Ic205b6a1452cd15d2dfd50c578c751a0245ee63f
(cherry picked from commit 1da0880b)

Test: cargo test
Change-Id: I3bef064bf09c2a0ecb7bfac7f670b44c8b38206e
Merged-In: I3bef064bf09c2a0ecb7bfac7f670b44c8b38206e
(cherry picked from commit 0a285c00)

Test: cargo test
Change-Id: I5f06a09bb483fffeac88e77b085f32cb2a2a588e
Merged-In: I5f06a09bb483fffeac88e77b085f32cb2a2a588e
(cherry picked from commit 1efc3acb)

Provide accessors to get the information from the scope instead.
This change is intended to reduce the gap between lint::Scope and
analyzer::Scope in order to smooth the transition to the new
analyzer.

Test: cargo test
Change-Id: I790ef147df2a702d7cd970d05c10c96b7f2ea22b
Merged-In: I790ef147df2a702d7cd970d05c10c96b7f2ea22b
(cherry picked from commit dd3504c9)

Test: NA
Change-Id: I8b7f7dcde94a03e64b81b9503031d67ae846aef8
Merged-In: Idfbf269d253f93786a63ebdb810c6200da0d2c45

Merge "[BluetoothMetrics] Adding dependent changes for direct LE-ACL L2CAP fixed channel" into tm-qpr-dev am: b9a19014

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22228749



Change-Id: I2714eb1e58ed8016b648b7da367ef7906dd7f0fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Merge "[BluetoothMetrics] Adding dependent changes for direct LE-ACL L2CAP fixed channel" into tm-qpr-dev

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21090924



Change-Id: Icd0b2724c1a443d50ed0e832dd2254922c8dc01b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21090924



Change-Id: I72949a74e23dbbb0fd2dbee7bd7eee0b2f0c316a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21090924



Change-Id: Idfe58b567a3484ddcf8be45e1515b6349ed290f3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21090924



Change-Id: I738774a2642f1fddd59553790e18b0bf304c114b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Fix to the regression reported in b/264708304 and b/266585826 added:
The root cause of the regression, the sensor HAL layer expects the HID feature
reports to contain 40 bytes, even less bytes are contained in the data
field.

This updated fix restores the length of data fields with the len arg.

Bug: 259675705
Test: manual verification with a Pixel 6 and LinkBuds
Ignore-AOSP-First: security
Tag: security
Change-Id: I02f16c360965b049fc6c8fdfa0132b7aa54bc1d3