1. 1159ffd AudioFlinger: Fix memory allocation for client-less tracks by Andy Hung · 8 years ago
  2. ef3a4ae Merge "Fix security vulnerability: Equalizer setParameter memory overflow" into klp-dev by Ricardo Garcia · 8 years ago
  3. d050902 Merge "Check the buffer index from acquireBuffer" into klp-dev by TreeHugger Robot · 8 years ago
  4. 68b9e0f Fix security vulnerability: Equalizer setParameter memory overflow by rago · 8 years ago
  5. f5d6e98 Merge "EffectBundle: Check value size for get preset name" into klp-dev by Andy Hung · 8 years ago
  6. 0215750 Merge "better manage buffer for libstagefright_soft_mpeg4enc" into klp-dev by TreeHugger Robot · 8 years ago
  7. 2da03f4 Merge "m4v_h263: update width/height only when they are valid." into klp-dev by TreeHugger Robot · 8 years ago
  8. da924b4 Merge "DO NOT MERGE - m4v_h263: check header first before decoding a frame." into klp-dev by Wei Jia · 8 years ago
  9. 90d2dd4 better manage buffer for libstagefright_soft_mpeg4enc by Ray Essick · 8 years ago
  10. 2f9eacc Merge "Fix potential leak" into klp-dev by TreeHugger Robot · 8 years ago
  11. fc60940 Check the buffer index from acquireBuffer by Pawin Vongmasa · 8 years ago
  12. 6770100 DO NOT MERGE - m4v_h263: check header first before decoding a frame. by Wei Jia · 8 years ago
  13. 0b57267 m4v_h263: update width/height only when they are valid. by Wei Jia · 8 years ago
  14. fa5c6c9 EffectBundle: Check value size for get preset name by Andy Hung · 8 years ago
  15. 5136b74 Merge "Fix memory leak in error case" into klp-dev by Marco Nelissen · 8 years ago
  16. bf92856 Limit ogg packet size by Marco Nelissen · 8 years ago
  17. ab34612 Fix memory leak in error case by Marco Nelissen · 8 years ago
  18. e077beb Fix potential leak by Marco Nelissen · 8 years ago
  19. 922ad61 Merge "Don't allow using or allocating a buffer after the first state transition" into klp-dev by Marco Nelissen · 8 years ago
  20. 5c36499 Avoid crash for stss sync sample number 0 by Roger1 Jonsson · 9 years ago
  21. 45060d6 Don't allow using or allocating a buffer after the first state transition by Marco Nelissen · 8 years ago
  22. 13c77f4 DO NOT MERGE FLACExtractor: copy protect mWriteBuffer by Robert Shih · 9 years ago
  23. 19b91af Merge "Add bounds check in SoftAACEncoder2::onQueueFilled()" into klp-dev by Ray Essick · 8 years ago
  24. 2076915 Merge "Fix TOCTOU problem in libstagefright_soft_aacenc" into klp-dev by Ray Essick · 8 years ago
  25. b264ece Merge "Fix integer overflow and divide-by-zero" into klp-dev by Marco Nelissen · 8 years ago
  26. 012e5fd Merge "Fix NPDs in h263 decoder" into klp-dev by Marco Nelissen · 8 years ago
  27. 360cbbd Merge "Fix out of bounds access" into klp-dev by Marco Nelissen · 8 years ago
  28. 6231243 Add bounds check in SoftAACEncoder2::onQueueFilled() by Ray Essick · 8 years ago
  29. 2ad2a92 Fix NPDs in h263 decoder by Marco Nelissen · 8 years ago
  30. 0495c02 Fix TOCTOU problem in libstagefright_soft_aacenc by Ray Essick · 8 years ago
  31. d1c19c5 Fix out of bounds access by Marco Nelissen · 8 years ago
  32. e0da30d Merge "DO NOT MERGE AudioFlinger: Check framecount overflow when creating track" into klp-dev by Andy Hung · 8 years ago
  33. 8538a60 Fix integer overflow and divide-by-zero by Marco Nelissen · 8 years ago
  34. dd447c3 DO NOT MERGE codecs: handle onReset() for a few encoders by Wonsik Kim · 8 years ago
  35. 64e843f DO NOT MERGE AudioFlinger: Check framecount overflow when creating track by Andy Hung · 8 years ago
  36. b6aa390 Merge "Fix overflow check and check read result" into klp-dev by Marco Nelissen · 8 years ago
  37. 65433ff Merge "stagefright: parseApp check data boundary conditions" into klp-dev by Marco Nelissen · 8 years ago
  38. 9667e3e Fix overflow check and check read result by Marco Nelissen · 8 years ago
  39. fdf64ba Merge "CameraBase: Don't return an sp<> by reference" into klp-dev by Eino-Ville Talvala · 9 years ago
  40. 2dd1d5e Revert "Turn off overflow protection for various math functions" by Marco Nelissen · 9 years ago
  41. 4b49489 CameraBase: Don't return an sp<> by reference by Eino-Ville Talvala · 9 years ago
  42. cbf5e69 Turn off overflow protection for various math functions by Marco Nelissen · 9 years ago
  43. 9b6b81d stagefright: parseApp check data boundary conditions by Mark Salyzyn · 11 years ago
  44. c2f0c73 Don't CHECK when buffer is too large by Marco Nelissen · 9 years ago
  45. b47a5ab DO NOT MERGE - improve audio effect framwework thread safety by Eric Laurent · 9 years ago
  46. 1576f59 Merge "Effect: Use local cached data for Effect commit" into klp-dev by Andy Hung · 9 years ago
  47. e275907 Fix security vulnerability: potential OOB write in audioserver by rago · 9 years ago
  48. dd79ccd Effect: Use local cached data for Effect commit by Andy Hung · 9 years ago
  49. 501aee7 Merge "Fix security vulnerability: Effect command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  50. 0118340 Fix security vulnerability: Effect command might allow negative indexes by rago · 9 years ago
  51. 7fdd364 Make VBRISeeker more robust by Marco Nelissen · 9 years ago
  52. c5768d0 Merge "Effects: Check get parameter command size" into klp-dev by Andy Hung · 9 years ago
  53. f89590d Merge "DO NOT MERGE: Visualizer: Check capture size and latency parameters" into klp-dev by Andy Hung · 9 years ago
  54. fc6faeb Merge "Fix security vulnerability: Equalizer command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  55. 3d34cc7 Effects: Check get parameter command size by Andy Hung · 9 years ago
  56. 2ff8053 DO NOT MERGE: defensive parsing of mp3 album art information by Ray Essick · 9 years ago
  57. e981cca Fix security vulnerability: Equalizer command might allow negative indexes by rago · 9 years ago
  58. 86cbc18 DO NOT MERGE: Visualizer: Check capture size and latency parameters by Andy Hung · 9 years ago
  59. 2c28e5b Merge "DO NOT MERGE Fix divide by zero" into klp-dev by Marco Nelissen · 9 years ago
  60. eee86b0 Merge "Fix potential NULL dereference in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  61. 8caef85 Merge "DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing." into klp-dev by Pawin Vongmasa · 9 years ago
  62. 874f9e0 Fix potential NULL dereference in Visualizer effect by rago · 9 years ago
  63. afb20c3 stagefright: don't fail MediaCodec.configure if clients use store-meta key by Lajos Molnar · 9 years ago
  64. febbd52 DO NOT MERGE Fix divide by zero by Marco Nelissen · 9 years ago
  65. de84a76 DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing. by Pawin Vongmasa · 9 years ago
  66. 610a922 Merge "SampleIterator: clear members on seekTo error" into klp-dev by Robert Shih · 9 years ago
  67. 9af51c5 Merge "Limit mp4 atom size to something reasonable" into klp-dev by Marco Nelissen · 9 years ago
  68. 638c99b Limit mp4 atom size to something reasonable by Marco Nelissen · 9 years ago
  69. 03237ce SampleIterator: clear members on seekTo error by Robert Shih · 9 years ago
  70. 866c800 Check mprotect result by Marco Nelissen · 9 years ago
  71. b602286 Merge "Fix potential overflow in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  72. ea76573 IOMX: do not clear buffer if it's allocated by component by Chong Zhang · 9 years ago
  73. c139040 IOMX: allow configuration after going to loaded state by Lajos Molnar · 9 years ago
  74. 425cc02 Merge "DO NOT MERGE: IOMX: work against metadata buffer spoofing" into klp-dev by Lajos Molnar · 9 years ago
  75. 2828412 MediaPlayerService: allow next player to be NULL by Wei Jia · 9 years ago
  76. 46dc714 Fix potential overflow in Visualizer effect by rago · 9 years ago
  77. 4fb531e Merge "DO NOT MERGE MediaPlayerService: avoid invalid static cast" into klp-dev by Robert Shih · 9 years ago
  78. 9665548 Merge "Add EFFECT_CMD_SET_PARAM parameter checking" into klp-dev by Andy Hung · 9 years ago
  79. ad929db DO NOT MERGE - Fix build breakage caused by commit by Pawin Vongmasa · 9 years ago
  80. e4a1d91 Add EFFECT_CMD_SET_PARAM parameter checking by Andy Hung · 9 years ago
  81. 807e827 DO NOT MERGE: IOMX: work against metadata buffer spoofing by Lajos Molnar · 9 years ago
  82. c159a5a DO NOT MERGE MediaPlayerService: avoid invalid static cast by Robert Shih · 9 years ago
  83. 940829f DO NOT MERGE - SoftMPEG4: Check the buffer size before writing the reference frame. by Pawin Vongmasa · 9 years ago
  84. 17a10c5 DO NOT MERGE - stagefright: fix integer overflow error by Wonsik Kim · 9 years ago
  85. 2b94fa8 omx: prevent input port enable/disable for software codecs by Wonsik Kim · 9 years ago
  86. bf835e4 DO NOT MERGE - Fix build by Robert Shih · 9 years ago
  87. 3242dcf Merge "DO NOT MERGE - SoftMP3: memset safely" into klp-dev by Robert Shih · 9 years ago
  88. 91ad884 Merge "DO NOT MERGE - SoftVPX: fix nFilledLen overflow" into klp-dev by Robert Shih · 9 years ago
  89. f545c72 Merge "OMXCodec: check IMemory::pointer() before using allocation" into klp-dev by Robert Shih · 9 years ago
  90. bce5cc9 DO NOT MERGE - SoftMP3: memset safely by Robert Shih · 9 years ago
  91. b867625 DO NOT MERGE - SoftVPX: fix nFilledLen overflow by Robert Shih · 9 years ago
  92. b529903 Merge "Fix corruption via buffer overflow in mediaserver" into klp-dev by Ray Essick · 9 years ago
  93. b239e27 Merge "DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble" into klp-dev by Wonsik Kim · 9 years ago
  94. 2a14bae OMXCodec: check IMemory::pointer() before using allocation by Robert Shih · 9 years ago
  95. b2396a5 Fix corruption via buffer overflow in mediaserver by Ray Essick · 9 years ago
  96. 7f55461 DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble by Wonsik Kim · 9 years ago
  97. 583a012 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 9 years ago
  98. 7e6bd6a Merge "Revert "Impose a size bound for dynamically allocated tables in stbl."" into klp-dev by Wonsik Kim · 9 years ago
  99. 66c4dbb Revert "Impose a size bound for dynamically allocated tables in stbl." by Wonsik Kim · 9 years ago
  100. 8f73edb Merge "Impose a size bound for dynamically allocated tables in stbl." into klp-dev by Wonsik Kim · 9 years ago