1. 68b9e0f Fix security vulnerability: Equalizer setParameter memory overflow by rago · 8 years ago
  2. 5136b74 Merge "Fix memory leak in error case" into klp-dev by Marco Nelissen · 8 years ago
  3. bf92856 Limit ogg packet size by Marco Nelissen · 8 years ago
  4. ab34612 Fix memory leak in error case by Marco Nelissen · 8 years ago
  5. 922ad61 Merge "Don't allow using or allocating a buffer after the first state transition" into klp-dev by Marco Nelissen · 8 years ago
  6. 5c36499 Avoid crash for stss sync sample number 0 by Roger1 Jonsson · 9 years ago
  7. 45060d6 Don't allow using or allocating a buffer after the first state transition by Marco Nelissen · 8 years ago
  8. 13c77f4 DO NOT MERGE FLACExtractor: copy protect mWriteBuffer by Robert Shih · 9 years ago
  9. 19b91af Merge "Add bounds check in SoftAACEncoder2::onQueueFilled()" into klp-dev by Ray Essick · 8 years ago
  10. 2076915 Merge "Fix TOCTOU problem in libstagefright_soft_aacenc" into klp-dev by Ray Essick · 8 years ago
  11. b264ece Merge "Fix integer overflow and divide-by-zero" into klp-dev by Marco Nelissen · 8 years ago
  12. 012e5fd Merge "Fix NPDs in h263 decoder" into klp-dev by Marco Nelissen · 8 years ago
  13. 360cbbd Merge "Fix out of bounds access" into klp-dev by Marco Nelissen · 8 years ago
  14. 6231243 Add bounds check in SoftAACEncoder2::onQueueFilled() by Ray Essick · 8 years ago
  15. 2ad2a92 Fix NPDs in h263 decoder by Marco Nelissen · 8 years ago
  16. 0495c02 Fix TOCTOU problem in libstagefright_soft_aacenc by Ray Essick · 8 years ago
  17. d1c19c5 Fix out of bounds access by Marco Nelissen · 8 years ago
  18. e0da30d Merge "DO NOT MERGE AudioFlinger: Check framecount overflow when creating track" into klp-dev by Andy Hung · 8 years ago
  19. 8538a60 Fix integer overflow and divide-by-zero by Marco Nelissen · 8 years ago
  20. dd447c3 DO NOT MERGE codecs: handle onReset() for a few encoders by Wonsik Kim · 8 years ago
  21. 64e843f DO NOT MERGE AudioFlinger: Check framecount overflow when creating track by Andy Hung · 8 years ago
  22. b6aa390 Merge "Fix overflow check and check read result" into klp-dev by Marco Nelissen · 8 years ago
  23. 65433ff Merge "stagefright: parseApp check data boundary conditions" into klp-dev by Marco Nelissen · 8 years ago
  24. 9667e3e Fix overflow check and check read result by Marco Nelissen · 8 years ago
  25. fdf64ba Merge "CameraBase: Don't return an sp<> by reference" into klp-dev by Eino-Ville Talvala · 9 years ago
  26. 2dd1d5e Revert "Turn off overflow protection for various math functions" by Marco Nelissen · 9 years ago
  27. 4b49489 CameraBase: Don't return an sp<> by reference by Eino-Ville Talvala · 9 years ago
  28. cbf5e69 Turn off overflow protection for various math functions by Marco Nelissen · 9 years ago
  29. 9b6b81d stagefright: parseApp check data boundary conditions by Mark Salyzyn · 11 years ago
  30. c2f0c73 Don't CHECK when buffer is too large by Marco Nelissen · 9 years ago
  31. b47a5ab DO NOT MERGE - improve audio effect framwework thread safety by Eric Laurent · 9 years ago
  32. 1576f59 Merge "Effect: Use local cached data for Effect commit" into klp-dev by Andy Hung · 9 years ago
  33. e275907 Fix security vulnerability: potential OOB write in audioserver by rago · 9 years ago
  34. dd79ccd Effect: Use local cached data for Effect commit by Andy Hung · 9 years ago
  35. 501aee7 Merge "Fix security vulnerability: Effect command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  36. 0118340 Fix security vulnerability: Effect command might allow negative indexes by rago · 9 years ago
  37. 7fdd364 Make VBRISeeker more robust by Marco Nelissen · 9 years ago
  38. c5768d0 Merge "Effects: Check get parameter command size" into klp-dev by Andy Hung · 9 years ago
  39. f89590d Merge "DO NOT MERGE: Visualizer: Check capture size and latency parameters" into klp-dev by Andy Hung · 9 years ago
  40. fc6faeb Merge "Fix security vulnerability: Equalizer command might allow negative indexes" into klp-dev by Ricardo Garcia · 9 years ago
  41. 3d34cc7 Effects: Check get parameter command size by Andy Hung · 9 years ago
  42. 2ff8053 DO NOT MERGE: defensive parsing of mp3 album art information by Ray Essick · 9 years ago
  43. e981cca Fix security vulnerability: Equalizer command might allow negative indexes by rago · 9 years ago
  44. 86cbc18 DO NOT MERGE: Visualizer: Check capture size and latency parameters by Andy Hung · 9 years ago
  45. 2c28e5b Merge "DO NOT MERGE Fix divide by zero" into klp-dev by Marco Nelissen · 9 years ago
  46. eee86b0 Merge "Fix potential NULL dereference in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  47. 8caef85 Merge "DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing." into klp-dev by Pawin Vongmasa · 9 years ago
  48. 874f9e0 Fix potential NULL dereference in Visualizer effect by rago · 9 years ago
  49. afb20c3 stagefright: don't fail MediaCodec.configure if clients use store-meta key by Lajos Molnar · 9 years ago
  50. febbd52 DO NOT MERGE Fix divide by zero by Marco Nelissen · 9 years ago
  51. de84a76 DO NOT MERGE - MPEG4Extractor: Check mLastTrack before dereferencing. by Pawin Vongmasa · 9 years ago
  52. 610a922 Merge "SampleIterator: clear members on seekTo error" into klp-dev by Robert Shih · 9 years ago
  53. 9af51c5 Merge "Limit mp4 atom size to something reasonable" into klp-dev by Marco Nelissen · 9 years ago
  54. 638c99b Limit mp4 atom size to something reasonable by Marco Nelissen · 9 years ago
  55. 03237ce SampleIterator: clear members on seekTo error by Robert Shih · 9 years ago
  56. 866c800 Check mprotect result by Marco Nelissen · 9 years ago
  57. b602286 Merge "Fix potential overflow in Visualizer effect" into klp-dev by Ricardo Garcia · 9 years ago
  58. ea76573 IOMX: do not clear buffer if it's allocated by component by Chong Zhang · 9 years ago
  59. c139040 IOMX: allow configuration after going to loaded state by Lajos Molnar · 9 years ago
  60. 425cc02 Merge "DO NOT MERGE: IOMX: work against metadata buffer spoofing" into klp-dev by Lajos Molnar · 9 years ago
  61. 2828412 MediaPlayerService: allow next player to be NULL by Wei Jia · 9 years ago
  62. 46dc714 Fix potential overflow in Visualizer effect by rago · 9 years ago
  63. 4fb531e Merge "DO NOT MERGE MediaPlayerService: avoid invalid static cast" into klp-dev by Robert Shih · 9 years ago
  64. 9665548 Merge "Add EFFECT_CMD_SET_PARAM parameter checking" into klp-dev by Andy Hung · 9 years ago
  65. ad929db DO NOT MERGE - Fix build breakage caused by commit by Pawin Vongmasa · 9 years ago
  66. e4a1d91 Add EFFECT_CMD_SET_PARAM parameter checking by Andy Hung · 9 years ago
  67. 807e827 DO NOT MERGE: IOMX: work against metadata buffer spoofing by Lajos Molnar · 9 years ago
  68. c159a5a DO NOT MERGE MediaPlayerService: avoid invalid static cast by Robert Shih · 9 years ago
  69. 940829f DO NOT MERGE - SoftMPEG4: Check the buffer size before writing the reference frame. by Pawin Vongmasa · 9 years ago
  70. 17a10c5 DO NOT MERGE - stagefright: fix integer overflow error by Wonsik Kim · 9 years ago
  71. 2b94fa8 omx: prevent input port enable/disable for software codecs by Wonsik Kim · 9 years ago
  72. bf835e4 DO NOT MERGE - Fix build by Robert Shih · 9 years ago
  73. 3242dcf Merge "DO NOT MERGE - SoftMP3: memset safely" into klp-dev by Robert Shih · 9 years ago
  74. 91ad884 Merge "DO NOT MERGE - SoftVPX: fix nFilledLen overflow" into klp-dev by Robert Shih · 9 years ago
  75. f545c72 Merge "OMXCodec: check IMemory::pointer() before using allocation" into klp-dev by Robert Shih · 9 years ago
  76. bce5cc9 DO NOT MERGE - SoftMP3: memset safely by Robert Shih · 9 years ago
  77. b867625 DO NOT MERGE - SoftVPX: fix nFilledLen overflow by Robert Shih · 9 years ago
  78. b529903 Merge "Fix corruption via buffer overflow in mediaserver" into klp-dev by Ray Essick · 9 years ago
  79. b239e27 Merge "DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble" into klp-dev by Wonsik Kim · 9 years ago
  80. 2a14bae OMXCodec: check IMemory::pointer() before using allocation by Robert Shih · 9 years ago
  81. b2396a5 Fix corruption via buffer overflow in mediaserver by Ray Essick · 9 years ago
  82. 7f55461 DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble by Wonsik Kim · 9 years ago
  83. 583a012 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 9 years ago
  84. 7e6bd6a Merge "Revert "Impose a size bound for dynamically allocated tables in stbl."" into klp-dev by Wonsik Kim · 9 years ago
  85. 66c4dbb Revert "Impose a size bound for dynamically allocated tables in stbl." by Wonsik Kim · 9 years ago
  86. 8f73edb Merge "Impose a size bound for dynamically allocated tables in stbl." into klp-dev by Wonsik Kim · 9 years ago
  87. 25e0297 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 9 years ago
  88. 22d6575 Merge "DO NOT MERGE: Camera: Adjust pointers to ANW buffers to avoid infoleak" into klp-dev by Eino-Ville Talvala · 9 years ago
  89. 5713902 Merge "DO NOT MERGE omx: check buffer port before using" into klp-dev by Wonsik Kim · 9 years ago
  90. 7a3de84 DO NOT MERGE: Camera: Adjust pointers to ANW buffers to avoid infoleak by Eino-Ville Talvala · 9 years ago
  91. cb76af1 DO NOT MERGE omx: check buffer port before using by Wonsik Kim · 9 years ago
  92. 110bc95 Check effect command reply size in AudioFlinger by Andy Hung · 9 years ago
  93. dc7357d Merge "DO NOT MERGE SoftAAC2: fix crash on all-zero adts buffer" into klp-dev by Marco Nelissen · 9 years ago
  94. 598f8d3 Merge "Don't use sp<>&" into klp-dev by Marco Nelissen · 9 years ago
  95. d85c449 DO NOT MERGE SoftAAC2: fix crash on all-zero adts buffer by Marco Nelissen · 9 years ago
  96. d009075 Fix potential overflow by Marco Nelissen · 9 years ago
  97. fc47a30 Don't use sp<>& by Marco Nelissen · 9 years ago
  98. b016207 DO NOT MERGE MPEG4Extractor: ensure kKeyTrackID exists before creating an MPEG4Source as track. by Wei Jia · 10 years ago
  99. f8429c0 Merge "DO NOT MERGE limit mediaserver memory" into klp-dev by Marco Nelissen · 9 years ago
  100. 1438f0b DO NOT MERGE limit mediaserver memory by Marco Nelissen · 9 years ago