1. ac5ef62 Merge "Camera3Device: Validate template ID" into klp-dev by Chien-Yu Chen · 9 years ago
  2. 116a189 Camera3Device: Validate template ID by Chien-Yu Chen · 9 years ago
  3. 1595f8a DO NOT MERGE Add VPX output buffer size check by Marco Nelissen · 9 years ago
  4. 09e024f DO NOT MERGE Don't reject "thumbnail mode" setConfig by Marco Nelissen · 9 years ago
  5. d579ad0 Merge "DO NOT MERGE Verify OMX buffer sizes prior to access" into klp-dev by Marco Nelissen · 9 years ago
  6. 51f59b4 DO NOT MERGE Verify OMX buffer sizes prior to access by Marco Nelissen · 9 years ago
  7. dc17049 Merge "Also fix out of bounds access for normal read" into klp-dev by Marco Nelissen · 9 years ago
  8. 61a6d26 Get service by value instead of reference by Marco Nelissen · 9 years ago
  9. 87afa84 Also fix out of bounds access for normal read by Marco Nelissen · 9 years ago
  10. f7a3882 Clear allocation to avoid info leak by Marco Nelissen · 9 years ago
  11. c73b811 DO NOT MERGE - Remove deprecated image defines by Vignesh Venkatasubramanian · 10 years ago
  12. c9ab2b0 Camera: Disallow dumping clients directly by Eino-Ville Talvala · 10 years ago
  13. 5403587 Fix out-of-bounds write by Marco Nelissen · 10 years ago
  14. 9e29523 fix possible overflow in effect wrappers. by Eric Laurent · 10 years ago
  15. 3d6a714 DO NOT MERGE SoundPool: add lock for findSample access from SoundPoolThread by Andy Hung · 10 years ago
  16. 6afc659 DO NOT MERGE - libstagefright: check requested memory size before allocation for SoftMPEG4Encoder and SoftVPXEncoder. by Wei Jia · 10 years ago
  17. b1a13d0 Merge "stagefright: MPEG4Extractor: allow 'hdlr' box before first track" into klp-dev by Jon Larimer · 10 years ago
  18. 0f21a68 Merge "DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread" into klp-dev by Glenn Kasten · 10 years ago
  19. 3b4a72a Merge "DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer." into klp-dev by Wei Jia · 10 years ago
  20. 4a03d78 DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer. by Wei Jia · 10 years ago
  21. 7ed8d1e ID3: check possible integer overflow for extendedHeaderSize and paddingSize. by Wei Jia · 10 years ago
  22. 74d1927 Merge "Check NAL size before use" into klp-dev by Marco Nelissen · 10 years ago
  23. 9ab9c85 Merge "MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData." into klp-dev by Wei Jia · 10 years ago
  24. 5d10129 Check NAL size before use by Marco Nelissen · 10 years ago
  25. e6d904f MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData. by Wei Jia · 10 years ago
  26. 257b3bc Don't crash when there's no conceal frame by Marco Nelissen · 10 years ago
  27. 302b546 stagefright: MPEG4Extractor: allow 'hdlr' box before first track by Lajos Molnar · 10 years ago
  28. 3737a3f DO NOT MERGE stagefright: fix AMessage::FromParcel by Flanker · 10 years ago
  29. ab0ea0f DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread by Andy Hung · 10 years ago
  30. 6272fa1 Merge "DO NOT MERGE Fix vulnerability in mediaserver" into klp-dev by Jeff Tinker · 10 years ago
  31. f43125e Merge "Fix for security vulnerability in media server DO NOT MERGE" into klp-dev by Jeff Tinker · 10 years ago
  32. ae92251 Merge "DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel." into klp-dev by Wei Jia · 10 years ago
  33. d386c5b Merge "Fix heap data leak vulnerability" into klp-dev by Jeff Tinker · 10 years ago
  34. 636539e DO NOT MERGE Fix vulnerability in mediaserver by Jeff Tinker · 10 years ago
  35. 8336fc4 DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel. by Wei Jia · 10 years ago
  36. b21a642 Merge "DO NOT MERGE NuCachedSource2: fix possible erroneous early free" into klp-dev by Wonsik Kim · 10 years ago
  37. 09ed70f Fix heap data leak vulnerability by Jeff Tinker · 10 years ago
  38. 9adc728 Fix for security vulnerability in media server DO NOT MERGE by Jeff Tinker · 10 years ago
  39. c894f81 DO NOT MERGE NuCachedSource2: fix possible erroneous early free by Wonsik Kim · 10 years ago
  40. 741a335 Merge "DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel." into klp-dev by Wei Jia · 10 years ago
  41. b659b4c Merge "DO NOT MERGE fix build" into klp-dev by Wonsik Kim · 10 years ago
  42. 9104e70 DO NOT MERGE fix build by Wonsik Kim · 10 years ago
  43. 1784a8d Merge "DO NOT MERGE Avoid size_t overflow in base64 decoding once again" into klp-dev by Wonsik Kim · 10 years ago
  44. 5f2a76f DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel. by Wei Jia · 10 years ago
  45. 278ed11 DO NOT MERGE Avoid size_t overflow in base64 decoding once again by Wonsik Kim · 10 years ago
  46. 69ae6a8 libstagefright: fix A_Refl to return immediately when there is an error. by Wei Jia · 10 years ago
  47. 13ff64c Merge "Zero out return values in media binder calls" into klp-dev by Robert Shih · 10 years ago
  48. ab20313 Merge "Make IEffect command more robust (second try)" into klp-dev by Andy Hung · 10 years ago
  49. 7488842 Merge "Fix timedtext parsing" into klp-dev by Marco Nelissen · 10 years ago
  50. 9d916c7 DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp by Wei Jia · 10 years ago
  51. d260527 Ogg: avoid size_t overflow in base64 decoding by Wonsik Kim · 10 years ago
  52. 8923543 Zero out return values in media binder calls by Robert Shih · 10 years ago
  53. 25a6344 Make IEffect command more robust (second try) by Andy Hung · 10 years ago
  54. d53aced Fix timedtext parsing by Marco Nelissen · 10 years ago
  55. f394f12 Merge "libmedia: clear reply data for IEffect command" into klp-dev by Andy Hung · 10 years ago
  56. 0981df6 IMediaPlayer.cpp: make sure structures are initialized to 0 by Nick Kralevich · 10 years ago
  57. 57bed83 libmedia: clear reply data for IEffect command by Andy Hung · 10 years ago
  58. 9a2be5d Merge "DO NOT MERGE - Fix software video decoder buffer size calculation" into klp-dev by Abhishek Arya · 10 years ago
  59. 0f3e2da DO NOT MERGE - Fix software video decoder buffer size calculation by Marco Nelissen · 10 years ago
  60. a5f50e9 DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data. by Wei Jia · 10 years ago
  61. af7e33f libstagefright: check overflow before memory allocation in OMXCodec.cpp by Wei Jia · 10 years ago
  62. dedaca6 Limit allocations to avoid out-of-memory by Marco Nelissen · 10 years ago
  63. 3b42241 Merge "Prevent integer issues in ID3::Iterator::findFrame" into klp-dev by Robert Shih · 10 years ago
  64. c580c83 Prevent integer issues in ID3::Iterator::findFrame by Joshua J. Drake · 10 years ago
  65. d8816a1 DO NOT MERGE libstagefright: Fix crash in convertMetaDataToMessage by Wei Jia · 10 years ago
  66. 8de6d69 Fix build break DO NOT MERGE by Jeff Tinker · 10 years ago
  67. c2153d0 DO NOT MERGE Part of fix for libmedia OOB write anywhere by Jeff Tinker · 10 years ago
  68. 5aa887e am 59bfb7aa: (-s ours) am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  69. 59bfb7a am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  70. 18a8124 am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  71. da0a48d am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  72. 6020f06 am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  73. b294a97 am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  74. 6cba581 am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  75. 51bfaf6 am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  76. 1afea55 am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  77. 8a064aa Merge "Fail more gracefully on allocation failure" into klp-dev by Marco Nelissen · 10 years ago
  78. ce73af0 DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  79. 522019f Merge "libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable." into klp-dev by Wei Jia · 10 years ago
  80. 635d38a Merge "Check RTSP payload length" into klp-dev by Abhishek Arya · 10 years ago
  81. 2c880dd Merge "Sanity check padding/delay values for gapless playback" into klp-dev by Abhishek Arya · 10 years ago
  82. 6ae815e Merge "libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets." into klp-dev by Wei Jia · 10 years ago
  83. 937c6be libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets. by Wei Jia · 10 years ago
  84. b2ae435 libstagefright: fix overflow in pvdec_api.cpp. by Wei Jia · 10 years ago
  85. 4d46f6f Check RTSP payload length by Marco Nelissen · 10 years ago
  86. 108cd2d libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable. by Wei Jia · 10 years ago
  87. 3878b99 Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  88. 916a968 Merge "DO NOT MERGE - audio flinger: fix fuzz test crash" into klp-dev by Eric Laurent · 10 years ago
  89. 877c76a Merge "stagefright: check IMemory::pointer() before using the allocation" into klp-dev by Chong Zhang · 10 years ago
  90. ba6093a Sanity check padding/delay values for gapless playback by Marco Nelissen · 10 years ago
  91. f97b6be Merge "Check integer overflow to prevent memory corruption" into klp-dev by Jon Larimer · 10 years ago
  92. 2ed42ae Merge "do not dequeue from native window after we hit fatal error -- DO NOT MERGE" into klp-dev by Jon Larimer · 10 years ago
  93. 0d46c93 Merge "MPEG4Source::fragmentedRead: check range before writing into buffers" into klp-dev by Jon Larimer · 10 years ago
  94. aa1cc74 Merge "Check buffer size before using it" into klp-dev by Jon Larimer · 10 years ago
  95. 6efa86b Merge "Check vector size before accessing" into klp-dev by Abhishek Arya · 10 years ago
  96. 6f561b9 Merge "MatroskaExtractor: detect infinite loop when parsing NALs" into klp-dev by Abhishek Arya · 10 years ago
  97. 407d475 MatroskaExtractor: detect infinite loop when parsing NALs by Robert Shih · 10 years ago
  98. c37f7f6 Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354 by Neel Mehta · 10 years ago
  99. deba061 Merge "Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"" into klp-dev by Abhishek Arya · 10 years ago
  100. 9abb740 Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4 by Abhishek Arya · 10 years ago