)]}'
{
  "commit": "e5f0966c76bd0a7e81e4205c8d8b55e6b34c833e",
  "tree": "2a4ea433c05520b8fe5628b778b32a79c88daafb",
  "parents": [
    "0e27e080c255b23b4b0e19cb3bc9519cc162b73f"
  ],
  "author": {
    "name": "Joshua J. Drake",
    "email": "android-open-source@qoop.org",
    "time": "Mon May 04 18:29:08 2015 -0500"
  },
  "committer": {
    "name": "Wei Jia",
    "email": "wjia@google.com",
    "time": "Wed Jun 03 15:43:31 2015 -0700"
  },
  "message": "Fix integer overflow when handling MPEG4 tx3g atom\n\nWhen the sum of the \u0027size\u0027 and \u0027chunk_size\u0027 variables is larger than 2^32,\nan integer overflow occurs. Using the result value to allocate memory\nleads to an undersized buffer allocation and later a potentially\nexploitable heap corruption condition. Ensure that integer overflow does\nnot occur.\n\nBug: 20923261\nChange-Id: Id050a36b33196864bdd98b5ea24241f95a0b5d1f\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d52b6054c80dce9f9ae2682a98dd3f9a22a0b243",
      "old_mode": 33188,
      "old_path": "media/libstagefright/MPEG4Extractor.cpp",
      "new_id": "3d150902f0fa83b2062b012ca1a4e917f1c9f20b",
      "new_mode": 33188,
      "new_path": "media/libstagefright/MPEG4Extractor.cpp"
    }
  ]
}