1. 2076915 Merge "Fix TOCTOU problem in libstagefright_soft_aacenc" into klp-dev by Ray Essick · 8 years ago
  2. b264ece Merge "Fix integer overflow and divide-by-zero" into klp-dev by Marco Nelissen · 8 years ago
  3. 012e5fd Merge "Fix NPDs in h263 decoder" into klp-dev by Marco Nelissen · 8 years ago
  4. 360cbbd Merge "Fix out of bounds access" into klp-dev by Marco Nelissen · 8 years ago
  5. 2ad2a92 Fix NPDs in h263 decoder by Marco Nelissen · 8 years ago
  6. 0495c02 Fix TOCTOU problem in libstagefright_soft_aacenc by Ray Essick · 8 years ago
  7. d1c19c5 Fix out of bounds access by Marco Nelissen · 8 years ago
  8. e0da30d Merge "DO NOT MERGE AudioFlinger: Check framecount overflow when creating track" into klp-dev by Andy Hung · 8 years ago
  9. 8538a60 Fix integer overflow and divide-by-zero by Marco Nelissen · 8 years ago
  10. dd447c3 DO NOT MERGE codecs: handle onReset() for a few encoders by Wonsik Kim · 8 years ago
  11. 64e843f DO NOT MERGE AudioFlinger: Check framecount overflow when creating track by Andy Hung · 8 years ago
  12. b6aa390 Merge "Fix overflow check and check read result" into klp-dev by Marco Nelissen · 8 years ago
  13. 65433ff Merge "stagefright: parseApp check data boundary conditions" into klp-dev by Marco Nelissen · 8 years ago
  14. 9667e3e Fix overflow check and check read result by Marco Nelissen · 8 years ago
  15. fdf64ba Merge "CameraBase: Don't return an sp<> by reference" into klp-dev by Eino-Ville Talvala · 9 years ago
  16. 2dd1d5e Revert "Turn off overflow protection for various math functions" by Marco Nelissen · 9 years ago
  17. 4b49489 CameraBase: Don't return an sp<> by reference by Eino-Ville Talvala · 9 years ago
  18. cbf5e69 Turn off overflow protection for various math functions by Marco Nelissen · 9 years ago
  19. 9b6b81d stagefright: parseApp check data boundary conditions by Mark Salyzyn · 11 years ago
  20. c2f0c73 Don't CHECK when buffer is too large by Marco Nelissen · 9 years ago
  21. b47a5ab DO NOT MERGE - improve audio effect framwework thread safety by Eric Laurent · 9 years ago
  22. 1576f59 Merge "Effect: Use local cached data for Effect commit" into klp-dev by Andy Hung · 9 years ago
  23. e275907 Fix security vulnerability: potential OOB write in audioserver by rago · 9 years ago
  24. dd79ccd Effect: Use local cached data for Effect commit by Andy Hung · 9 years ago
  25. 501aee7 Merge "Fix security vulnerability: Effect command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  26. 0118340 Fix security vulnerability: Effect command might allow negative indexes by rago · 9 years ago
  27. 7fdd364 Make VBRISeeker more robust by Marco Nelissen · 9 years ago
  28. c5768d0 Merge "Effects: Check get parameter command size" into klp-dev by Andy Hung · 9 years ago
  29. f89590d Merge "DO NOT MERGE: Visualizer: Check capture size and latency parameters" into klp-dev by Andy Hung · 9 years ago
  30. fc6faeb Merge "Fix security vulnerability: Equalizer command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  31. 3d34cc7 Effects: Check get parameter command size by Andy Hung · 9 years ago
  32. 2ff8053 DO NOT MERGE: defensive parsing of mp3 album art information by Ray Essick · 9 years ago
  33. e981cca Fix security vulnerability: Equalizer command might allow negative indexes by rago · 9 years ago
  34. 86cbc18 DO NOT MERGE: Visualizer: Check capture size and latency parameters by Andy Hung · 9 years ago
  35. 2c28e5b Merge "DO NOT MERGE Fix divide by zero" into klp-dev by Marco Nelissen · 9 years ago
  36. eee86b0 Merge "Fix potential NULL dereference in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  37. 8caef85 Merge "DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing." into klp-dev by Pawin Vongmasa · 9 years ago
  38. 874f9e0 Fix potential NULL dereference in Visualizer effect by rago · 9 years ago
  39. afb20c3 stagefright: don't fail MediaCodec.configure if clients use store-meta key by Lajos Molnar · 9 years ago
  40. febbd52 DO NOT MERGE Fix divide by zero by Marco Nelissen · 9 years ago
  41. de84a76 DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing. by Pawin Vongmasa · 9 years ago
  42. 610a922 Merge "SampleIterator: clear members on seekTo error" into klp-dev by Robert Shih · 9 years ago
  43. 9af51c5 Merge "Limit mp4 atom size to something reasonable" into klp-dev by Marco Nelissen · 9 years ago
  44. 638c99b Limit mp4 atom size to something reasonable by Marco Nelissen · 9 years ago
  45. 03237ce SampleIterator: clear members on seekTo error by Robert Shih · 9 years ago
  46. 866c800 Check mprotect result by Marco Nelissen · 9 years ago
  47. b602286 Merge "Fix potential overflow in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  48. ea76573 IOMX: do not clear buffer if it's allocated by component by Chong Zhang · 9 years ago
  49. c139040 IOMX: allow configuration after going to loaded state by Lajos Molnar · 9 years ago
  50. 425cc02 Merge "DO NOT MERGE: IOMX: work against metadata buffer spoofing" into klp-dev by Lajos Molnar · 9 years ago
  51. 2828412 MediaPlayerService: allow next player to be NULL by Wei Jia · 9 years ago
  52. 46dc714 Fix potential overflow in Visualizer effect by rago · 9 years ago
  53. 4fb531e Merge "DO NOT MERGE MediaPlayerService: avoid invalid static cast" into klp-dev by Robert Shih · 9 years ago
  54. 9665548 Merge "Add EFFECT_CMD_SET_PARAM parameter checking" into klp-dev by Andy Hung · 9 years ago
  55. ad929db DO NOT MERGE - Fix build breakage caused by commit by Pawin Vongmasa · 9 years ago
  56. e4a1d91 Add EFFECT_CMD_SET_PARAM parameter checking by Andy Hung · 9 years ago
  57. 807e827 DO NOT MERGE: IOMX: work against metadata buffer spoofing by Lajos Molnar · 9 years ago
  58. c159a5a DO NOT MERGE MediaPlayerService: avoid invalid static cast by Robert Shih · 9 years ago
  59. 940829f DO NOT MERGE - SoftMPEG4: Check the buffer size before writing the reference frame. by Pawin Vongmasa · 9 years ago
  60. 17a10c5 DO NOT MERGE - stagefright: fix integer overflow error by Wonsik Kim · 9 years ago
  61. 2b94fa8 omx: prevent input port enable/disable for software codecs by Wonsik Kim · 9 years ago
  62. bf835e4 DO NOT MERGE - Fix build by Robert Shih · 9 years ago
  63. 3242dcf Merge "DO NOT MERGE - SoftMP3: memset safely" into klp-dev by Robert Shih · 9 years ago
  64. 91ad884 Merge "DO NOT MERGE - SoftVPX: fix nFilledLen overflow" into klp-dev by Robert Shih · 9 years ago
  65. f545c72 Merge "OMXCodec: check IMemory::pointer() before using allocation" into klp-dev by Robert Shih · 9 years ago
  66. bce5cc9 DO NOT MERGE - SoftMP3: memset safely by Robert Shih · 9 years ago
  67. b867625 DO NOT MERGE - SoftVPX: fix nFilledLen overflow by Robert Shih · 9 years ago
  68. b529903 Merge "Fix corruption via buffer overflow in mediaserver" into klp-dev by Ray Essick · 9 years ago
  69. b239e27 Merge "DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble" into klp-dev by Wonsik Kim · 9 years ago
  70. 2a14bae OMXCodec: check IMemory::pointer() before using allocation by Robert Shih · 9 years ago
  71. b2396a5 Fix corruption via buffer overflow in mediaserver by Ray Essick · 9 years ago
  72. 7f55461 DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble by Wonsik Kim · 9 years ago
  73. 583a012 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 9 years ago
  74. 7e6bd6a Merge "Revert "Impose a size bound for dynamically allocated tables in stbl."" into klp-dev by Wonsik Kim · 9 years ago
  75. 66c4dbb Revert "Impose a size bound for dynamically allocated tables in stbl." by Wonsik Kim · 9 years ago
  76. 8f73edb Merge "Impose a size bound for dynamically allocated tables in stbl." into klp-dev by Wonsik Kim · 9 years ago
  77. 25e0297 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 9 years ago
  78. 22d6575 Merge "DO NOT MERGE: Camera: Adjust pointers to ANW buffers to avoid infoleak" into klp-dev by Eino-Ville Talvala · 9 years ago
  79. 5713902 Merge "DO NOT MERGE omx: check buffer port before using" into klp-dev by Wonsik Kim · 9 years ago
  80. 7a3de84 DO NOT MERGE: Camera: Adjust pointers to ANW buffers to avoid infoleak by Eino-Ville Talvala · 9 years ago
  81. cb76af1 DO NOT MERGE omx: check buffer port before using by Wonsik Kim · 9 years ago
  82. 110bc95 Check effect command reply size in AudioFlinger by Andy Hung · 9 years ago
  83. dc7357d Merge "DO NOT MERGE SoftAAC2: fix crash on all-zero adts buffer" into klp-dev by Marco Nelissen · 9 years ago
  84. 598f8d3 Merge "Don't use sp<>&" into klp-dev by Marco Nelissen · 9 years ago
  85. d85c449 DO NOT MERGE SoftAAC2: fix crash on all-zero adts buffer by Marco Nelissen · 9 years ago
  86. d009075 Fix potential overflow by Marco Nelissen · 9 years ago
  87. fc47a30 Don't use sp<>& by Marco Nelissen · 9 years ago
  88. b016207 DO NOT MERGE MPEG4Extractor: ensure kKeyTrackID exists before creating an MPEG4Source as track. by Wei Jia · 10 years ago
  89. f8429c0 Merge "DO NOT MERGE limit mediaserver memory" into klp-dev by Marco Nelissen · 9 years ago
  90. 1438f0b DO NOT MERGE limit mediaserver memory by Marco Nelissen · 9 years ago
  91. fddbb1a Merge "DO NOT MERGE Check malloc result to avoid NPD" into klp-dev by Marco Nelissen · 9 years ago
  92. eb37c37 Merge "Fix security vulnerability in libstagefright" into klp-dev by Jeff Tinker · 9 years ago
  93. ad92798 DO NOT MERGE Check malloc result to avoid NPD by Marco Nelissen · 9 years ago
  94. d7d5041 Fix security vulnerability in libstagefright by Jeff Tinker · 9 years ago
  95. 87277aa h264bsdActivateParamSets: Prevent multiplication overflow. by Pawin Vongmasa · 9 years ago
  96. 71095f1 Merge "Clear unused pointer field when sending across binder" into klp-dev by Marco Nelissen · 9 years ago
  97. e663be8 Clear unused pointer field when sending across binder by Marco Nelissen · 9 years ago
  98. c002126 Merge "DO NOT MERGE More OMX struct checking" into klp-dev by Marco Nelissen · 9 years ago
  99. 1fdf009 DO NOT MERGE More OMX struct checking by Marco Nelissen · 9 years ago
  100. 70dec4d SampleTable.cpp: Fixed a regression caused by a fix for bug 28076789. by Pawin Vongmasa · 9 years ago