1. eb37c37 Merge "Fix security vulnerability in libstagefright" into klp-dev by Jeff Tinker · 9 years ago
  2. d7d5041 Fix security vulnerability in libstagefright by Jeff Tinker · 9 years ago
  3. 87277aa h264bsdActivateParamSets: Prevent multiplication overflow. by Pawin Vongmasa · 9 years ago
  4. 71095f1 Merge "Clear unused pointer field when sending across binder" into klp-dev by Marco Nelissen · 9 years ago
  5. e663be8 Clear unused pointer field when sending across binder by Marco Nelissen · 9 years ago
  6. c002126 Merge "DO NOT MERGE More OMX struct checking" into klp-dev by Marco Nelissen · 9 years ago
  7. 1fdf009 DO NOT MERGE More OMX struct checking by Marco Nelissen · 9 years ago
  8. 70dec4d SampleTable.cpp: Fixed a regression caused by a fix for bug 28076789. by Pawin Vongmasa · 9 years ago
  9. 7cab953 Merge "DO NOT MERGE codecs: check OMX buffer size before use in (gsm|g711)dec" into klp-dev by Wonsik Kim · 9 years ago
  10. 5964527 Merge "SampleTable.cpp: Prevent corrupted stts block from causing excessive memory allocation." into klp-dev by Pawin Vongmasa · 9 years ago
  11. a3630a4 SampleTable.cpp: Prevent corrupted stts block from causing by Pawin Vongmasa · 9 years ago
  12. a3dd713 h264dec: check for overflows when calculating allocation size. by Marco Nelissen · 9 years ago
  13. 52636f8 Merge "DO NOT MERGE codecs: check OMX buffer size before use in vorbisdec" into klp-dev by Wonsik Kim · 9 years ago
  14. f81eab3 Merge "DO NOT MERGE codecs: check OMX buffer size before use in (h263|h264)dec" into klp-dev by Wonsik Kim · 9 years ago
  15. 0490fe2 DO NOT MERGE codecs: check OMX buffer size before use in (gsm|g711)dec by Wonsik Kim · 9 years ago
  16. bc736f6 Merge "Check mp3 output buffer size" into klp-dev by Marco Nelissen · 9 years ago
  17. a2f5b80 AudioSource: initialize variables by Marco Nelissen · 9 years ago
  18. 30940b3 Check mp3 output buffer size by Marco Nelissen · 9 years ago
  19. e75d53a DO NOT MERGE codecs: check OMX buffer size before use in (h263|h264)dec by Wonsik Kim · 9 years ago
  20. 006e6f1 DO NOT MERGE codecs: check OMX buffer size before use in vorbisdec by Wonsik Kim · 9 years ago
  21. f305afb Merge "SampleTable: reduce unnecessary logging message." into klp-dev by Wei Jia · 9 years ago
  22. d061b5b Fix AMR decoder by Marco Nelissen · 9 years ago
  23. cccd2e5 SampleTable: reduce unnecessary logging message. by Wei Jia · 9 years ago
  24. c27cee3 SampleTable: add logging. by Wei Jia · 9 years ago
  25. 4f99823 Merge "DO NOT MERGE codecs: check OMX buffer size before use in VP8 encoder." into klp-dev by Wonsik Kim · 9 years ago
  26. 4fa31b5 Merge "NuPlayerStreamListener: NULL and bounds check before memcpy" into klp-dev by Marco Nelissen · 9 years ago
  27. 55e5218 SoftAMR: check input buffer size to avoid overflow. by Wei Jia · 9 years ago
  28. a3536c6 SoftAMR: check output buffer size to avoid overflow. by Wei Jia · 9 years ago
  29. 13fe6cd DO NOT MERGE codecs: check OMX buffer size before use in VP8 encoder. by Wonsik Kim · 9 years ago
  30. ac5ef62 Merge "Camera3Device: Validate template ID" into klp-dev by Chien-Yu Chen · 9 years ago
  31. 88b3147 NuPlayerStreamListener: NULL and bounds check before memcpy by Robert Shih · 9 years ago
  32. 116a189 Camera3Device: Validate template ID by Chien-Yu Chen · 9 years ago
  33. 1595f8a DO NOT MERGE Add VPX output buffer size check by Marco Nelissen · 9 years ago
  34. 09e024f DO NOT MERGE Don't reject "thumbnail mode" setConfig by Marco Nelissen · 9 years ago
  35. d579ad0 Merge "DO NOT MERGE Verify OMX buffer sizes prior to access" into klp-dev by Marco Nelissen · 9 years ago
  36. 51f59b4 DO NOT MERGE Verify OMX buffer sizes prior to access by Marco Nelissen · 9 years ago
  37. dc17049 Merge "Also fix out of bounds access for normal read" into klp-dev by Marco Nelissen · 9 years ago
  38. 61a6d26 Get service by value instead of reference by Marco Nelissen · 9 years ago
  39. 87afa84 Also fix out of bounds access for normal read by Marco Nelissen · 9 years ago
  40. f7a3882 Clear allocation to avoid info leak by Marco Nelissen · 9 years ago
  41. c73b811 DO NOT MERGE - Remove deprecated image defines by Vignesh Venkatasubramanian · 10 years ago
  42. c9ab2b0 Camera: Disallow dumping clients directly by Eino-Ville Talvala · 10 years ago
  43. 5403587 Fix out-of-bounds write by Marco Nelissen · 10 years ago
  44. 9e29523 fix possible overflow in effect wrappers. by Eric Laurent · 10 years ago
  45. 3d6a714 DO NOT MERGE SoundPool: add lock for findSample access from SoundPoolThread by Andy Hung · 10 years ago
  46. 6afc659 DO NOT MERGE - libstagefright: check requested memory size before allocation for SoftMPEG4Encoder and SoftVPXEncoder. by Wei Jia · 10 years ago
  47. b1a13d0 Merge "stagefright: MPEG4Extractor: allow 'hdlr' box before first track" into klp-dev by Jon Larimer · 10 years ago
  48. 0f21a68 Merge "DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread" into klp-dev by Glenn Kasten · 10 years ago
  49. 3b4a72a Merge "DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer." into klp-dev by Wei Jia · 10 years ago
  50. 4a03d78 DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer. by Wei Jia · 10 years ago
  51. 7ed8d1e ID3: check possible integer overflow for extendedHeaderSize and paddingSize. by Wei Jia · 10 years ago
  52. 74d1927 Merge "Check NAL size before use" into klp-dev by Marco Nelissen · 10 years ago
  53. 9ab9c85 Merge "MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData." into klp-dev by Wei Jia · 10 years ago
  54. 5d10129 Check NAL size before use by Marco Nelissen · 10 years ago
  55. e6d904f MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData. by Wei Jia · 10 years ago
  56. 257b3bc Don't crash when there's no conceal frame by Marco Nelissen · 10 years ago
  57. 302b546 stagefright: MPEG4Extractor: allow 'hdlr' box before first track by Lajos Molnar · 10 years ago
  58. 3737a3f DO NOT MERGE stagefright: fix AMessage::FromParcel by Flanker · 10 years ago
  59. ab0ea0f DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread by Andy Hung · 10 years ago
  60. 6272fa1 Merge "DO NOT MERGE Fix vulnerability in mediaserver" into klp-dev by Jeff Tinker · 10 years ago
  61. f43125e Merge "Fix for security vulnerability in media server DO NOT MERGE" into klp-dev by Jeff Tinker · 10 years ago
  62. ae92251 Merge "DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel." into klp-dev by Wei Jia · 10 years ago
  63. d386c5b Merge "Fix heap data leak vulnerability" into klp-dev by Jeff Tinker · 10 years ago
  64. 636539e DO NOT MERGE Fix vulnerability in mediaserver by Jeff Tinker · 10 years ago
  65. 8336fc4 DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel. by Wei Jia · 10 years ago
  66. b21a642 Merge "DO NOT MERGE NuCachedSource2: fix possible erroneous early free" into klp-dev by Wonsik Kim · 10 years ago
  67. 09ed70f Fix heap data leak vulnerability by Jeff Tinker · 10 years ago
  68. 9adc728 Fix for security vulnerability in media server DO NOT MERGE by Jeff Tinker · 10 years ago
  69. c894f81 DO NOT MERGE NuCachedSource2: fix possible erroneous early free by Wonsik Kim · 10 years ago
  70. 741a335 Merge "DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel." into klp-dev by Wei Jia · 10 years ago
  71. b659b4c Merge "DO NOT MERGE fix build" into klp-dev by Wonsik Kim · 10 years ago
  72. 9104e70 DO NOT MERGE fix build by Wonsik Kim · 10 years ago
  73. 1784a8d Merge "DO NOT MERGE Avoid size_t overflow in base64 decoding once again" into klp-dev by Wonsik Kim · 10 years ago
  74. 5f2a76f DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel. by Wei Jia · 10 years ago
  75. 278ed11 DO NOT MERGE Avoid size_t overflow in base64 decoding once again by Wonsik Kim · 10 years ago
  76. 69ae6a8 libstagefright: fix A_Refl to return immediately when there is an error. by Wei Jia · 10 years ago
  77. 13ff64c Merge "Zero out return values in media binder calls" into klp-dev by Robert Shih · 10 years ago
  78. ab20313 Merge "Make IEffect command more robust (second try)" into klp-dev by Andy Hung · 10 years ago
  79. 7488842 Merge "Fix timedtext parsing" into klp-dev by Marco Nelissen · 10 years ago
  80. 9d916c7 DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp by Wei Jia · 10 years ago
  81. d260527 Ogg: avoid size_t overflow in base64 decoding by Wonsik Kim · 10 years ago
  82. 8923543 Zero out return values in media binder calls by Robert Shih · 10 years ago
  83. 25a6344 Make IEffect command more robust (second try) by Andy Hung · 10 years ago
  84. d53aced Fix timedtext parsing by Marco Nelissen · 10 years ago
  85. f394f12 Merge "libmedia: clear reply data for IEffect command" into klp-dev by Andy Hung · 10 years ago
  86. 0981df6 IMediaPlayer.cpp: make sure structures are initialized to 0 by Nick Kralevich · 10 years ago
  87. 57bed83 libmedia: clear reply data for IEffect command by Andy Hung · 10 years ago
  88. 9a2be5d Merge "DO NOT MERGE - Fix software video decoder buffer size calculation" into klp-dev by Abhishek Arya · 10 years ago
  89. 0f3e2da DO NOT MERGE - Fix software video decoder buffer size calculation by Marco Nelissen · 10 years ago
  90. a5f50e9 DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data. by Wei Jia · 10 years ago
  91. af7e33f libstagefright: check overflow before memory allocation in OMXCodec.cpp by Wei Jia · 10 years ago
  92. dedaca6 Limit allocations to avoid out-of-memory by Marco Nelissen · 10 years ago
  93. 3b42241 Merge "Prevent integer issues in ID3::Iterator::findFrame" into klp-dev by Robert Shih · 10 years ago
  94. c580c83 Prevent integer issues in ID3::Iterator::findFrame by Joshua J. Drake · 10 years ago
  95. d8816a1 DO NOT MERGE libstagefright: Fix crash in convertMetaDataToMessage by Wei Jia · 10 years ago
  96. 8de6d69 Fix build break DO NOT MERGE by Jeff Tinker · 10 years ago
  97. c2153d0 DO NOT MERGE Part of fix for libmedia OOB write anywhere by Jeff Tinker · 10 years ago
  98. 5aa887e am 59bfb7aa: (-s ours) am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  99. 59bfb7a am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago
  100. 18a8124 am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 10 years ago