commit 86369364a07c85dd8f0e890b783a7bd434b8ef7c
author Lajos Molnar <lajos@google.com> Tue Aug 02 07:07:05 2016 -0700
committer Lajos Molnar <lajos@google.com> Thu Aug 18 14:25:51 2016 -0700
tree 6a17ee31928e7fef5edee7d01467a0208f303cf3
parent 8f4b1a7de0e102b9203cfda3970edd2eedd9becf

DO NOT MERGE: IOMX: work against metadata buffer spoofing

- Prohibit direct set/getParam/Settings for extensions meant for
  OMXNodeInstance alone. This disallows enabling metadata mode
  without the knowledge of OMXNodeInstance.
- Do not share metadata mode buffers cross process.
- Disallow setting up metadata mode/tunneling/input surface
  after first sendCommand. (Except to Idle state for OMXCodec quirk.)
- Disallow store-meta for input cross process.
- Disallow emptyBuffer for surface input (via IOMX).
- Fix checking for input surface.

[backported from L-MR1]

Bug: 29422020
Change-Id: I801c77b80e703903f62e42d76fd2e76a34e4bc8e