Skip to content

Pull requests: google/nearby

New pull request New
199 Open 4,209 Closed
199 Open 4,209 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Automated Code Change
#4509 opened Aug 21, 2026 by copybara-service Bot • Draft
Add file_sync_complete event type to sharing enums.
#4507 opened Aug 20, 2026 by copybara-service Bot • Draft
Internal
#4501 opened Aug 12, 2026 by copybara-service Bot • Draft
Read NetBiosName name as "device name" to compare with the "device name" from WIFI P2P frame
#4482 opened Jul 28, 2026 by copybara-service Bot • Draft
Prevent cross-medium endpoint injection attacks
#4472 opened Jul 20, 2026 by copybara-service Bot • Draft
Windows Quick Share used a weak, time-seeded PRNG to generate the WPA2-PSK and SSID for WIFI_HOTSPOT bandwidth upgrades (BWU). Because the SSID was broadcast in the clear and derived from the same PRNG, an attacker could use it as an oracle to recover the seed and the WPA2-PSK. Furthermore, UKEY2 application-layer encryption was explicitly disabled for Point-to-Point transfers on these upgraded channels, leaving file transfers vulnerable to interception and decryption by an RF-proximate attacker.
#4463 opened Jul 14, 2026 by copybara-service Bot • Draft
During a Nearby Connections bandwidth upgrade, the initiator relied on plaintext fields from an unauthenticated CLIENT_INTRODUCTION message to determine whether to disable encryption. A network-adjacent attacker could exploit this to bypass UKEY2 authentication, downgrade the session to plaintext, and inject malicious payload chunks. Alternatively, an attacker could trigger a race condition with concurrent connection attempts to permanently deadlock the bandwidth upgrade thread.
#4462 opened Jul 14, 2026 by copybara-service Bot • Draft
Prevent pre-authentication SSRF and internal port-scan oracle in Windows Quick Share mDNS discovery (b/509566800).
#4458 opened Jul 13, 2026 by copybara-service Bot • Draft
A use-after-free vulnerability in the Windows Quick Share BLE GATT server allowed a pre-authentication attacker to leak heap memory. The issue occurred when an unauthenticated GATT Read Request raced against a background advertisement rotation or Wi-Fi deauthentication event that called Stop(), freeing the underlying characteristic data while the read handler was blocked.
#4457 opened Jul 13, 2026 by copybara-service Bot • Draft
Improve logging for Nearby Connections bandwidth upgrades and WifiDirect credentials.
#4445 opened Jul 6, 2026 by copybara-service Bot • Draft
Fix unbounded payload streaming in Nearby Connections and Sharing
#4437 opened Jun 29, 2026 by copybara-service Bot • Draft
Fix mixed topology vulnerability in PcpManager
#4435 opened Jun 28, 2026 by copybara-service Bot • Draft
Fix build issues and enhance Swift NearbyConnections API.
#4433 opened Jun 26, 2026 by copybara-service Bot • Draft
Prevent cross-medium endpoint injection attacks
#4429 opened Jun 25, 2026 by copybara-service Bot • Draft
Internal
#4423 opened Jun 24, 2026 by copybara-service Bot • Draft
Implementation go/nc-in-band-wfd, which introduced the P2P Wi-Fi direct connection via p2p discovery and WPS-PBC authentication.
#4406 opened Jun 15, 2026 by copybara-service Bot • Draft
internal
#4391 opened Jun 4, 2026 by copybara-service Bot • Draft
Harden Nearby Connections Bandwidth Upgrade process
#4386 opened Jun 3, 2026 by copybara-service Bot • Draft
Fix endpoint spoofing in connections.
#4384 opened Jun 3, 2026 by copybara-service Bot • Draft
[Nearby Connections] Fix ClientProxy UAF, concurrency data races, and BleSocket deadlocks.
#4368 opened May 27, 2026 by copybara-service Bot • Draft
add HTTP latency
#4349 opened May 20, 2026 by copybara-service Bot • Draft
Add Backup bindings related actions.
#4337 opened May 14, 2026 by copybara-service Bot • Draft
Fix SwiftPM manifest trailing comma
#4322 opened May 12, 2026 by adrianmcphee Loading…
webrtc
#4318 opened May 11, 2026 by copybara-service Bot • Draft
Added UWB and BLE CS capability flags for GRAPI ranging support.
#4299 opened Apr 30, 2026 by copybara-service Bot • Draft
ProTip! Exclude everything labeled bug with -label:bug.