Success Rate as per go/bluetooth-le-connection-metrics.

Unit Tests:
- Successful
- Failure
- Timeout
- Cancellation

Test: atest bluetooth_test_gd_unit:LEConnectionMetricsRemoteDeviceTest --host
Bug: b/268252025
Change-Id: Iddef3b0c873c9999e165078912339b97caf6b265
Merged-In: I7b8618c30d5f1e4dc5b9665e056934c2db888271

Structure length is checked in pan_api.cc after the structure may
be freed, leading to a potential use after free.

Save the buffer length to a local instead.  Note that BNEP_WriteBuf
may alter the length being written internally; this does not appear
to be an issue in this use case because the octet count being tracked
is used only for logging purposes within PAN.

Bug: 259939435
Test: atest bluetooth_test_gd_unit, validate against researcher POC
Tag: #security
Ignore-AOSP-First: Security
Change-Id: I613b3dd3684182bdc725f9e1512061484448d367

Currently we are leaking GMCS instance every time BT is restarted.

Bug: 273361967
Test: manual, restart bluetooth, observe output of:
adb shell dumpsys bluetooth_manager | grep -A 10 "Server\:"
(cherry picked from https://android-review.googlesource.com/q/commit:db6561f3d907c74055fe74f8e8a5b979da5cd1aa)
Merged-In: I3fabbe267a380a1eae482bb54be5551db9f0029e
Change-Id: I3fabbe267a380a1eae482bb54be5551db9f0029e

Currently, because of aosp/683369 the device will initiate
Codec Negotiation even if the remote device does not send the
required AT+BAC command during Service Level Connection setup.

This enables in the following out-of-spec sequence:
1. Device sends Codec Negotiation NOT supported to a Headset which does.
2. Headset respects the feature not supported, and does not send AT+BAC.
3. Device initiates Codec Negotiation with the Headset anyway.

This check ensures that Device will not attempt to initiate
Codec Negotiation at all if the local feature is not enabled.

Bug: 267171863
Test: make
(cherry picked from https://android-review.googlesource.com/q/commit:4be3e5d58237cfdfa89a7c5324c26c986ef52239)
Merged-In: I446e071e3b66875a2bacde228841ca703acd5739
Change-Id: I446e071e3b66875a2bacde228841ca703acd5739
Bug: 263323082

There is a chance the callback gets invoked right after a AVRC
disconnection and bt_rc_ctrl_callbacks has been cleared.

Tag: stability
Bug: 242208896
Test: presubmit, Bluetooth calling test items
(cherry picked from https://android-review.googlesource.com/q/commit:722854df05ddad0567f5c30db2491afc90d15228)
Merged-In: I649ac336022a20894d2311313d7ed68687bc70a3
Change-Id: I649ac336022a20894d2311313d7ed68687bc70a3
Bug: 263323082

Power modes only work with classic/br_edr

Bug: 262479565
Tag: #refactor
Test: gd/cert/run
(cherry picked from https://android-review.googlesource.com/q/commit:272684810473fe72988475eb307f49305b45904a)
Merged-In: I2b28968159df873aabb2c12f7855beae89c6d653
Change-Id: I2b28968159df873aabb2c12f7855beae89c6d653
Bug: 263323082

Bug: 274037299
Test: presubmit tests
(cherry picked from https://android-review.googlesource.com/q/commit:6e179238dc3b3eaa5f8e26c9eff0d891decae5ea)
Merged-In: I993505cd6656d67362eeefd6bd3abd411e8f59ff
Change-Id: I993505cd6656d67362eeefd6bd3abd411e8f59ff

If doing gatt discovery, we should always send this event to the upper
layer on its conclusion. Otherwise we get the pairing_cb stuck.

Bug: 263050668
Test: manual
(cherry picked from https://android-review.googlesource.com/q/commit:3380f3ddf0dedc8d0cb3ca7256711bff5c2aee98)
Merged-In: I65aa5cddc3fe5a9f5c8b9e2d43d676bf3d9082b7
Change-Id: I07621dd098ad887c82927a3af9f41ac2b31c15b0

Follow the example of OBEX to not crash when switching users.

Bug: 234340159
Test: switch users rapidly
(cherry picked from https://android-review.googlesource.com/q/commit:8ec31c7732b93f40b89a8977d692c1b8eec21e8e)
Merged-In: I3e67f14cc9a95097941c51705ed54957b0f1448f
Change-Id: I3e67f14cc9a95097941c51705ed54957b0f1448f

Originally, this code used an alarm to delay authentication requests.
When an incoming authentication request arrived, the alarm was
checked first. That check was removed with the alarm, so this CL
adds a check to see if the device is authenticating before starting
the process.

Bug: 270161453
Test: atest pts-bot
Change-Id: I0cd19a3070656c3882323d1fa87caed1ee330e1e
Merged-In: I0cd19a3070656c3882323d1fa87caed1ee330e1e

- Currently the value is set to constant min/max which does not make
  sense to the controller in most of the cases.
- Set length to 0 to align with the behavior in legacy stack as well
  as the extended create connection command in gd stack.

Bug: 268702775
Test: cert/run
(cherry picked from https://android-review.googlesource.com/q/commit:29a98dedcb3894c4c5b4e6dab4130f898ad37b2b)
Merged-In: Ie6a0aefb9bc35ddc6e6ab4c0aced6c0e860565b5
Bug: 263323082

Change-Id: I347725be669a8182f0c831a6d81877f4ebf32aaa

Bug: 271610217
Tag: #refactor
Test: Manual
Ignore-AOSP-First: cherry-pick

Merged-In: I02a3d272e2cfd25d4ca96c383652681da357e50c
Change-Id: I02a3d272e2cfd25d4ca96c383652681da357e50c

This reverts commit 802904ca.

Reason for revert: bluetooth_connection_latency_a2dp_sink_ms-median regression
Bug: 266685780

Change-Id: I36c0c8a87b50f5601d0773304edfba4cac6d2c5f

Merge "Revert "Validate buffer length in sdpu_build_uuid_seq"" into tm-dev am: b4a26774 am: 8c11dc05

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21967012



Change-Id: I89180c18f45bfbe947cdc166fdf42c2ad9e7599b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/21967012



Change-Id: Id55eb2d40d023aa7d56c947cef8c94d6b754ce21
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

* changes:
  Add hfp sysprop for hf_features
  Add hfp sysprop for hf_client_features

This reverts commit 367ed057.

Reason for revert: Reverting from May QPR, will reinstate unchanged for a later release

Change-Id: I36ae57ec7e81ac0357fa1c6fb98dff219ee6dade

The `define` cannot be override on runtime and some target need to
configure the features (Eg: Wear OS)

Test: manual | set the property and check new behavior
Bug: 263323082
Change-Id: I197d670c929c7a086340f9d8ff72b0ec170616fe
(cherry picked from https://android-review.googlesource.com/q/commit:698f4dce56fc120263c944d19af60506f79d2afb)
Merged-In: I197d670c929c7a086340f9d8ff72b0ec170616fe

The `define` cannot be override on runtime and some target need to
configure the features (Eg: Wear OS)

Test: atest net_test_bta net_test_btif_hf_client_service
Test: manual | set the property and check new behavior
Bug: 263323082

(cherry picked from https://android-review.googlesource.com/q/commit:248721c131c03a069db8effcc443ce951d595c5d)

Change-Id: Ic241364ceed263138797e3c3ad0f139da67e689a
Merged-In: Ic241364ceed263138797e3c3ad0f139da67e689a

These configurations were in bt_stack.conf and shared between LE and
CTKD(SMP over BR/EDR). Devices may need different parameters for these 2
modes and to configure them, so we need properties to control them.

Bug: 269773251
Test: net_test_stack_btm
Test: Avatar - test CTKD over BR/EDR on 2 directions
Change-Id: Iaf250e12cc58abb8df8ebad32c6593ebcd974ee8
(cherry picked from https://android-review.googlesource.com/q/commit:4da8aad839d9cfb2fe0227b36eb5b3a95f7300f4)
Merged-In: Iaf250e12cc58abb8df8ebad32c6593ebcd974ee8
Bug: 263323082

This reverts commit 7bd6f7bd.
Additionally, reverts commit I43c8edd95608103ab04bb0a33965c2ba90971459
and Ia1765bbd024e86a8482f15a93234933edd32024a

Test: atest BluetoothOppServiceTest
Bug: 266459454
Reason for revert: b/266459454

Change-Id: I6b6d6a3701959331327984964f6267f6c9f8e3c2
Merged-In: I6b6d6a3701959331327984964f6267f6c9f8e3c2