)]}'
{
  "log": [
    {
      "commit": "116a18940e30859ac04a95ffe4d4fefb313d7ab2",
      "tree": "c37348abc54ddea7552532e1f3d63ab07a2a12cc",
      "parents": [
        "09e024fe9a8dd9646e053275dd636301a9d463f0"
      ],
      "author": {
        "name": "Chien-Yu Chen",
        "email": "cychen@google.com",
        "time": "Wed Mar 09 12:21:01 2016 -0800"
      },
      "committer": {
        "name": "Chien-Yu Chen",
        "email": "cychen@google.com",
        "time": "Fri Mar 18 20:37:49 2016 +0000"
      },
      "message": "Camera3Device: Validate template ID\n\nValidate template ID before creating a default request.\n\nBug: 26866110\nBug: 27568958\nChange-Id: Ifda457024f1d5c2b1382f189c1a8d5fda852d30d\n"
    },
    {
      "commit": "09e024fe9a8dd9646e053275dd636301a9d463f0",
      "tree": "c8297e840c60cd87172181ceda7d8f2707543d97",
      "parents": [
        "d579ad0639c6df7f4648047992aaaf00f107799c"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Mar 11 14:40:17 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Mar 11 14:40:17 2016 -0800"
      },
      "message": "DO NOT MERGE Don\u0027t reject \"thumbnail mode\" setConfig\n\nBug: 27207275\nChange-Id: I35f6bf5b407869a9479feaf1b5beef7b68d04509\n"
    },
    {
      "commit": "d579ad0639c6df7f4648047992aaaf00f107799c",
      "tree": "ccef6e0af1a5e194ad935feac2d9507d484a6aca",
      "parents": [
        "dc17049b0294dd6b0b2156783d83333cca37fc4b",
        "51f59b41eae9c4f493ebfd0972cee951895bdf19"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Mar 04 23:22:59 2016 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Mar 04 23:22:59 2016 +0000"
      },
      "message": "Merge \"DO NOT MERGE Verify OMX buffer sizes prior to access\" into klp-dev"
    },
    {
      "commit": "51f59b41eae9c4f493ebfd0972cee951895bdf19",
      "tree": "4d60766562a05acb6314e24deb9cef849e8fb992",
      "parents": [
        "f7a388203a1632084dbe3307d7e3265f689bc11e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Feb 29 12:47:20 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Mar 03 15:35:27 2016 -0800"
      },
      "message": "DO NOT MERGE Verify OMX buffer sizes prior to access\n\nBug: 27207275\nChange-Id: I4412825d1ee233d993af0a67708bea54304ff62d\n"
    },
    {
      "commit": "dc17049b0294dd6b0b2156783d83333cca37fc4b",
      "tree": "c30e04f7a38e6590c7bc690784c967c64cd00ac7",
      "parents": [
        "61a6d26aab95870279b274e565c1495748befde0",
        "87afa840a40af570278e93251cfc5e55a6a3d92e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Feb 24 21:05:22 2016 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Feb 24 21:05:22 2016 +0000"
      },
      "message": "Merge \"Also fix out of bounds access for normal read\" into klp-dev"
    },
    {
      "commit": "61a6d26aab95870279b274e565c1495748befde0",
      "tree": "d58c9beb9e499e5983db76a52f02f2456c35ff92",
      "parents": [
        "f7a388203a1632084dbe3307d7e3265f689bc11e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Feb 18 08:25:47 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Feb 23 19:28:09 2016 -0800"
      },
      "message": "Get service by value instead of reference\n\nto prevent a cleared service binder from being used.\n\nBug: 26040840\nChange-Id: Ifb5483c55b172d3553deb80dbe27f2204b86ecdb\n"
    },
    {
      "commit": "87afa840a40af570278e93251cfc5e55a6a3d92e",
      "tree": "72e18f7d893b08a77386e598afac4a9090593f4c",
      "parents": [
        "f7a388203a1632084dbe3307d7e3265f689bc11e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Feb 23 14:48:46 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Feb 23 15:22:40 2016 -0800"
      },
      "message": "Also fix out of bounds access for normal read\n\nPrevious fix accidentally only fixed the fragmented read case.\n\nBug: 27208621\nChange-Id: Ie16f1920b84c8aba613842659238fcd5925694ad\n"
    },
    {
      "commit": "f7a388203a1632084dbe3307d7e3265f689bc11e",
      "tree": "efe764ee5cf1ca0a620bb7c449aef249e8cf62c3",
      "parents": [
        "c73b811066319b2c7bbd1bc876a73f53a16f07e0"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Feb 22 13:05:15 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Feb 22 13:39:41 2016 -0800"
      },
      "message": "Clear allocation to avoid info leak\n\nBug: 26914474\nChange-Id: Ie1a86e86d78058d041149fe599a4996e7f8185cf\n"
    },
    {
      "commit": "c73b811066319b2c7bbd1bc876a73f53a16f07e0",
      "tree": "18eabfd0b519cb3d072f9a6fd69bc5b21a9e88b1",
      "parents": [
        "c9ab2b0bb05a7e19fb057e79b36e232809d70122"
      ],
      "author": {
        "name": "Vignesh Venkatasubramanian",
        "email": "vigneshv@google.com",
        "time": "Wed Jan 13 12:18:05 2016 -0800"
      },
      "committer": {
        "name": "Vignesh Venkatasubramanian",
        "email": "vigneshv@google.com",
        "time": "Wed Jan 20 16:49:35 2016 -0800"
      },
      "message": "DO NOT MERGE - Remove deprecated image defines\n\nlibvpx has always supported the VPX_ prefixed versions of these defines.\nThe unprefixed versions have been removed in the most recent release.\n\nhttps://chromium.googlesource.com/webm/libvpx/+/9cdaa3d72eade9ad162ef8f78a93bd8f85c6de10\n\nBUG\u003d23452792\n\nChange-Id: Ib02073f42d545e6c08f9bd4a4fc868e3be886c1b\n"
    },
    {
      "commit": "c9ab2b0bb05a7e19fb057e79b36e232809d70122",
      "tree": "56b7491b0926f3cee5da173483e2d49e11969237",
      "parents": [
        "5403587a74aee2fb57076528c3927851531c8afb"
      ],
      "author": {
        "name": "Eino-Ville Talvala",
        "email": "etalvala@google.com",
        "time": "Wed Jan 13 10:07:04 2016 -0800"
      },
      "committer": {
        "name": "Eino-Ville Talvala",
        "email": "etalvala@google.com",
        "time": "Wed Jan 13 16:21:49 2016 -0800"
      },
      "message": "Camera: Disallow dumping clients directly\n\nCamera service dumps should only be initiated through\nICameraService::dump.\n\nBug: 26265403\nChange-Id: If3ca4718ed74bf33ad8a416192689203029e2803\n"
    },
    {
      "commit": "5403587a74aee2fb57076528c3927851531c8afb",
      "tree": "630f36eda2cf59c2fbc020e68f36cb23ac893b7c",
      "parents": [
        "9e29523b9537983b4c4b205ff868d0b3bca0383b"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Jan 12 12:37:36 2016 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Jan 12 12:37:36 2016 -0800"
      },
      "message": "Fix out-of-bounds write\n\nBug: 26365349\nChange-Id: Ia363d9f8c231cf255dea852e0bbf5ca466c7990b\n"
    },
    {
      "commit": "9e29523b9537983b4c4b205ff868d0b3bca0383b",
      "tree": "e26b62c7419fe2a7f521d704e64e687a119441a2",
      "parents": [
        "3d6a7149802928ecf3f58b7218b0e82699b492df"
      ],
      "author": {
        "name": "Eric Laurent",
        "email": "elaurent@google.com",
        "time": "Fri Jan 08 10:52:38 2016 -0800"
      },
      "committer": {
        "name": "Eric Laurent",
        "email": "elaurent@google.com",
        "time": "Mon Jan 11 18:08:30 2016 +0000"
      },
      "message": "fix possible overflow in effect wrappers.\n\nAdd checks on parameter size field in effect command handlers\nto avoid overflow leading to invalid comparison with min allowed\nsize for command and reply buffers.\n\nBug: 26347509.\nChange-Id: I20e6a9b6de8e5172b957caa1ac9410b9752efa4d\n(cherry picked from commit ad1bd92a49d78df6bc6e75bee68c517c1326f3cf)\n"
    },
    {
      "commit": "3d6a7149802928ecf3f58b7218b0e82699b492df",
      "tree": "d1733d4792e95ae68ed843927cf38291863e4c42",
      "parents": [
        "6afc659b00c3f4a83b9f5f3c744b7119b33340b4"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Wed Dec 02 15:55:23 2015 -0800"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Dec 03 18:54:00 2015 +0000"
      },
      "message": "DO NOT MERGE SoundPool: add lock for findSample access from SoundPoolThread\n\nSample decoding still occurs in SoundPoolThread\nwithout holding the SoundPool lock.\n\nBug: 25781119\nChange-Id: I11fde005aa9cf5438e0390a0d2dfe0ec1dd282e8\n"
    },
    {
      "commit": "6afc659b00c3f4a83b9f5f3c744b7119b33340b4",
      "tree": "68e7a24302e124cd3e267e2e467f9447e03c6fb3",
      "parents": [
        "b1a13d01dccbc48ea54aeb4a4ba7fce636ff1daa"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Nov 20 10:34:35 2015 -0800"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Dec 03 09:40:33 2015 -0800"
      },
      "message": "DO NOT MERGE - libstagefright: check requested memory size before allocation for SoftMPEG4Encoder and SoftVPXEncoder.\n\nBug: 25812794\nChange-Id: I96dc74734380d462583f6efa33d09946f9532809\n(cherry picked from commit 87f8cbb223ee516803dbb99699320c2484cbf3ba)\n"
    },
    {
      "commit": "b1a13d01dccbc48ea54aeb4a4ba7fce636ff1daa",
      "tree": "17fb9dd4a706a7d1cd6e58d1d39f87f652737c36",
      "parents": [
        "0f21a6880e74b56834940a131df912a49b70e82d",
        "302b546bdccc777c1d3100510cd928e8bdf55fa5"
      ],
      "author": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Tue Oct 20 20:55:20 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Oct 20 20:55:20 2015 +0000"
      },
      "message": "Merge \"stagefright: MPEG4Extractor: allow \u0027hdlr\u0027 box before first track\" into klp-dev"
    },
    {
      "commit": "0f21a6880e74b56834940a131df912a49b70e82d",
      "tree": "aa07c4e4f4891a41fe768d392c276966f3206bd5",
      "parents": [
        "3b4a72acf039c58c33807b6d6fcdd5e09eafb1df",
        "ab0ea0fe9a1e4afad5b39e094f6640318aefdd33"
      ],
      "author": {
        "name": "Glenn Kasten",
        "email": "gkasten@google.com",
        "time": "Wed Oct 14 20:30:55 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Oct 14 20:30:55 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread\" into klp-dev"
    },
    {
      "commit": "3b4a72acf039c58c33807b6d6fcdd5e09eafb1df",
      "tree": "a5850b7ca540008bc04e756192df47bcb6805729",
      "parents": [
        "7ed8d1eff9b292b3c65a875b13a549e29654534b",
        "4a03d784f7c0e3a9685d182eee92ba6580eaf5a1"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Oct 08 16:37:26 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Oct 08 16:37:26 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer.\" into klp-dev"
    },
    {
      "commit": "4a03d784f7c0e3a9685d182eee92ba6580eaf5a1",
      "tree": "a7356ea6c85c6d1b4b45e0288f43b4f9fe9edae4",
      "parents": [
        "74d1927e4122a1748f89ca2ef79406fc06ee94b2"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Sep 28 11:32:23 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Oct 07 11:27:32 2015 -0700"
      },
      "message": "DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer.\n\nBug: 24310423\nChange-Id: Iebcfc58b447f925ec2134898060af2ef227266a3\n(cherry picked from commit 8dde7269a5356503d2b283234b6cb46d0c3f214e)\n"
    },
    {
      "commit": "7ed8d1eff9b292b3c65a875b13a549e29654534b",
      "tree": "fa1bf26bacb7f6f89be4dc61fb81f8d3e402207e",
      "parents": [
        "74d1927e4122a1748f89ca2ef79406fc06ee94b2"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Oct 05 10:44:23 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Oct 06 21:36:55 2015 +0000"
      },
      "message": "ID3: check possible integer overflow for extendedHeaderSize and paddingSize.\n\nBug: 24623447\nChange-Id: Ifbc74454d6e28ad7136efe35ab638a07e46398b1\n(cherry picked from commit b3694ff5a5bcecd4b6cedca156f6effb55bbf4ca)\n"
    },
    {
      "commit": "74d1927e4122a1748f89ca2ef79406fc06ee94b2",
      "tree": "8d2c582f35035464af6a68c0d7be5657e391cd39",
      "parents": [
        "9ab9c85e39f089f355faa9cd9db6d113dc482e61",
        "5d101298d8b0a78a1dc5bd26dbdada411f4ecd4d"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Oct 06 16:34:45 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Oct 06 16:34:45 2015 +0000"
      },
      "message": "Merge \"Check NAL size before use\" into klp-dev"
    },
    {
      "commit": "9ab9c85e39f089f355faa9cd9db6d113dc482e61",
      "tree": "acc874f0654c62b26b9d38309e2ed68f94ab0dd3",
      "parents": [
        "257b3bc581bbc65318a4cc2d3c22a07a4429dc1d",
        "e6d904fe5f6e7c7fc1d5fca2798dd3512468b118"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Oct 06 16:21:35 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Oct 06 16:21:35 2015 +0000"
      },
      "message": "Merge \"MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData.\" into klp-dev"
    },
    {
      "commit": "5d101298d8b0a78a1dc5bd26dbdada411f4ecd4d",
      "tree": "6ee149bea15ae8b0b8f279e510535efddc234fef",
      "parents": [
        "3737a3fa121796131ea5b782230e65dad9ccf90f"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Oct 02 15:12:00 2015 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Oct 06 07:48:29 2015 -0700"
      },
      "message": "Check NAL size before use\n\nBug: 24441553\nBug: 24445122\nChange-Id: Ib7f025769adbafd5a2cb64fae5562a0a565945c2\n"
    },
    {
      "commit": "e6d904fe5f6e7c7fc1d5fca2798dd3512468b118",
      "tree": "0d14091afd78b81eafdcb7a2a6c82fb5b5952525",
      "parents": [
        "3737a3fa121796131ea5b782230e65dad9ccf90f"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Sep 28 14:50:47 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Oct 06 02:54:39 2015 +0000"
      },
      "message": "MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData.\n\nBug: 24346430\nChange-Id: I897a724e968841d9160f819d06c0ce22f6d743c4\n(cherry picked from commit 5cae16bdce77b0a3ba590b55637f7d55a2f35402)\n"
    },
    {
      "commit": "257b3bc581bbc65318a4cc2d3c22a07a4429dc1d",
      "tree": "f0d526664edac8cab7fe9eb253262cd6661e7dda",
      "parents": [
        "3737a3fa121796131ea5b782230e65dad9ccf90f"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Oct 05 10:46:11 2015 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Oct 05 11:21:58 2015 -0700"
      },
      "message": "Don\u0027t crash when there\u0027s no conceal frame\n\nBug: 24630158\nChange-Id: If042aebebb58c218eb7bbf01dcddbcbd05dca1d6\n"
    },
    {
      "commit": "302b546bdccc777c1d3100510cd928e8bdf55fa5",
      "tree": "35728701a097f499ac77277efa4bf9137c31e680",
      "parents": [
        "3737a3fa121796131ea5b782230e65dad9ccf90f"
      ],
      "author": {
        "name": "Lajos Molnar",
        "email": "lajos@google.com",
        "time": "Mon Aug 31 17:19:52 2015 -0700"
      },
      "committer": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Fri Oct 02 20:41:47 2015 +0000"
      },
      "message": "stagefright: MPEG4Extractor: allow \u0027hdlr\u0027 box before first track\n\nBug: 21725583\nChange-Id: I799c1967759c7e49fb50281a1708188450caac77\n(cherry picked from commit cf75af8f76265fb2909028f5dc68c7029dbe5f49)\n"
    },
    {
      "commit": "3737a3fa121796131ea5b782230e65dad9ccf90f",
      "tree": "44c68bc198e35edaf4a5c80620f5e68b58939dc0",
      "parents": [
        "6272fa1baf361a6a89607243638cc592047947b3"
      ],
      "author": {
        "name": "Flanker",
        "email": "i@flanker017.me",
        "time": "Fri Sep 11 19:05:47 2015 +0800"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Fri Sep 25 17:53:35 2015 +0900"
      },
      "message": "DO NOT MERGE stagefright: fix AMessage::FromParcel\n\nAdd check for incoming mNumItems. Also add check readCString return\nvalue.\n\nFix style \u0026 add log.\n\nBug: 24123723\n\nChange-Id: If41a5312c27d868f481893eef56019b6807c39b7\n"
    },
    {
      "commit": "ab0ea0fe9a1e4afad5b39e094f6640318aefdd33",
      "tree": "66a8bd4ee6e4aa4ccdd31f98ce2769cd7683026f",
      "parents": [
        "6272fa1baf361a6a89607243638cc592047947b3"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Sep 24 15:08:13 2015 -0700"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Sep 24 16:50:20 2015 -0700"
      },
      "message": "DO NOT MERGE - AudioFlinger: Clear record buffers when starting RecordThread\n\nBug: 24211743\nBug: 24267152\nChange-Id: I58c55e56b85067b71e4e300f947b4dfc159637ba\n"
    },
    {
      "commit": "6272fa1baf361a6a89607243638cc592047947b3",
      "tree": "e3f95e231ec43d93a06ff6bdd09f322bf5b305d4",
      "parents": [
        "f43125ed08a408b02613b99f058564d97ce690cc",
        "636539eb1a0d407d7f82b7c9a6d9833f7715e287"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Thu Sep 17 17:04:25 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 17 17:04:25 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE Fix vulnerability in mediaserver\" into klp-dev"
    },
    {
      "commit": "f43125ed08a408b02613b99f058564d97ce690cc",
      "tree": "bffa33718f670773303388e5e69461b1a2ff1d09",
      "parents": [
        "ae92251730865e0c4bc59ef2a8fe9dacb6de41b9",
        "9adc7283c84cea1be81d5bd55ce50aefa6328c6e"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Thu Sep 17 17:04:05 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 17 17:04:05 2015 +0000"
      },
      "message": "Merge \"Fix for security vulnerability in media server DO NOT MERGE\" into klp-dev"
    },
    {
      "commit": "ae92251730865e0c4bc59ef2a8fe9dacb6de41b9",
      "tree": "98c31d1ef56a3324419c1ebbd8820d87cf9ac738",
      "parents": [
        "d386c5be9505d2db24048a6e08ab714f2151dac2",
        "8336fc433eee213e201c8a65bf2a65b65bc67c44"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Sep 17 13:19:08 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 17 13:19:08 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel.\" into klp-dev"
    },
    {
      "commit": "d386c5be9505d2db24048a6e08ab714f2151dac2",
      "tree": "012fa432fe2d35c718cc5d787962964b528cf3a6",
      "parents": [
        "b21a642067477c72f419956da0ca8dafe0c04eab",
        "09ed70fab1f1424971ccc105dcdf5be5ce2e2643"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Wed Sep 16 18:17:46 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Sep 16 18:17:46 2015 +0000"
      },
      "message": "Merge \"Fix heap data leak vulnerability\" into klp-dev"
    },
    {
      "commit": "636539eb1a0d407d7f82b7c9a6d9833f7715e287",
      "tree": "815c5c0c5281a9de2c860da3cf1c62eea4d46b68",
      "parents": [
        "13ff64c2db84f4e7cac3396700e333b48c42c7ee"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Wed Sep 16 10:23:12 2015 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Wed Sep 16 10:23:56 2015 -0700"
      },
      "message": "DO NOT MERGE Fix vulnerability in mediaserver\n\nICrypto.cpp: ASLR bypass using DECRYPT IPC\n\nbug: 24074485\nChange-Id: I40dd0e92083c7093030393b16dbab59323306a4e\n"
    },
    {
      "commit": "8336fc433eee213e201c8a65bf2a65b65bc67c44",
      "tree": "f34fdbb0c5fb67bdef14493b565a04cdff95b738",
      "parents": [
        "b21a642067477c72f419956da0ca8dafe0c04eab"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Sep 10 09:47:29 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Sep 16 09:39:44 2015 -0700"
      },
      "message": "DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel.\n\nBug: 23953967\nChange-Id: Ibbe841da149038675e9e8daea76c77558bc8564b\n(cherry picked from commit 983dca391a76fb45df999fc40e8766b9ddb63511)\n"
    },
    {
      "commit": "b21a642067477c72f419956da0ca8dafe0c04eab",
      "tree": "0688e717f35bed31652ed83702110175bf9db1e8",
      "parents": [
        "741a335126a562ae8f5883cc0b02ba72f40e56f3",
        "c894f81bdf106f648561e569e0dc97fc6046115b"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Wed Sep 16 07:11:04 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Sep 16 07:11:04 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE NuCachedSource2: fix possible erroneous early free\" into klp-dev"
    },
    {
      "commit": "09ed70fab1f1424971ccc105dcdf5be5ce2e2643",
      "tree": "7cba0792014f79748c0fcc7c950cb4d6cc963403",
      "parents": [
        "13ff64c2db84f4e7cac3396700e333b48c42c7ee"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Sep 14 13:55:23 2015 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Sep 14 13:55:23 2015 -0700"
      },
      "message": "Fix heap data leak vulnerability\n\nbug: 23600291\nChange-Id: I7979e9e25ada01c13775be8580d433a8b4ce4ffe\n"
    },
    {
      "commit": "9adc7283c84cea1be81d5bd55ce50aefa6328c6e",
      "tree": "fa5f35497c755ea43733c1c0f4f156f466eb5566",
      "parents": [
        "13ff64c2db84f4e7cac3396700e333b48c42c7ee"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Sep 14 10:18:56 2015 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Sep 14 18:58:37 2015 +0000"
      },
      "message": "Fix for security vulnerability in media server DO NOT MERGE\n\nbug: 23540426\nChange-Id: I5d602f99fd82e50d0136d47ce20cfa1ac9fd7ae2\n"
    },
    {
      "commit": "c894f81bdf106f648561e569e0dc97fc6046115b",
      "tree": "38b63da21f7b2ae19a1e85ae56345eae3ad5a5ba",
      "parents": [
        "69ae6a87342d5260d8d8660accc8aa1b9367dbbe"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Tue Sep 08 17:32:28 2015 +0900"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Mon Sep 14 13:49:57 2015 +0900"
      },
      "message": "DO NOT MERGE NuCachedSource2: fix possible erroneous early free\n\nBecause the constructor of NuCachedSource2 sent a message to\nAHandlerReflector object, AHandlerReflector::onMessageReceived could\nhave executed just before the object gets wrapped in a strong\npointer, resulting in erroneous early free. Fix the issue by using\nstatic Create function to ensure the message is sent after the\nobject is wrapped in a sp.\n\nBug: 23882800\nChange-Id: I38a9d7a3083f184b4c81d0b00ba1661721278855\n"
    },
    {
      "commit": "741a335126a562ae8f5883cc0b02ba72f40e56f3",
      "tree": "2df1757115ff30b3f7d7405c5cb94e4ee5e51082",
      "parents": [
        "b659b4c7e1405056d189b44bd96036b6500dd378",
        "5f2a76f02f6d88825f8c164b4d9f7f310583eee1"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Sep 11 13:54:59 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Sep 11 13:54:59 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel.\" into klp-dev"
    },
    {
      "commit": "b659b4c7e1405056d189b44bd96036b6500dd378",
      "tree": "a581c07dd31ddab5272bdf852bc6c1c2cc3c449d",
      "parents": [
        "1784a8dbbc73b3e6033340d107b6c08478b962c8",
        "9104e704e43c9a6e691af52bb6f0aca71467979b"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Fri Sep 11 07:34:53 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Sep 11 07:34:53 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE fix build\" into klp-dev"
    },
    {
      "commit": "9104e704e43c9a6e691af52bb6f0aca71467979b",
      "tree": "9e85f8d4112b4b89689d95721f103cda703ae4c2",
      "parents": [
        "278ed118d5e6b0e216668551a5b8becdabd9aade"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Fri Sep 11 16:14:18 2015 +0900"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Fri Sep 11 07:29:55 2015 +0000"
      },
      "message": "DO NOT MERGE fix build\n\nBug: 23707088\n\nChange-Id: Ib0d6cbc52710f33310d21b2eae1f243f0f8e8bca\n"
    },
    {
      "commit": "1784a8dbbc73b3e6033340d107b6c08478b962c8",
      "tree": "421940e11b66358fce3730df3c5b8c49423a9396",
      "parents": [
        "69ae6a87342d5260d8d8660accc8aa1b9367dbbe",
        "278ed118d5e6b0e216668551a5b8becdabd9aade"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Fri Sep 11 06:49:22 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Sep 11 06:49:22 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE Avoid size_t overflow in base64 decoding once again\" into klp-dev"
    },
    {
      "commit": "5f2a76f02f6d88825f8c164b4d9f7f310583eee1",
      "tree": "ac667c1fa7c2f9a60bf01fc67154b9fcd874ca74",
      "parents": [
        "69ae6a87342d5260d8d8660accc8aa1b9367dbbe"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Sep 09 09:48:34 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Sep 10 10:03:56 2015 -0700"
      },
      "message": "DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel.\n\nBug: 23905951\nBug: 23912202\nChange-Id: Id13a9d3cae2c09e7381b841e67ddfb188274d74c\n(cherry picked from commit e995e477ad59b79145200c8f1e9e13c16c682d59)\n"
    },
    {
      "commit": "278ed118d5e6b0e216668551a5b8becdabd9aade",
      "tree": "c4680ca4e00f6932cb44c2b12618cc5dd4b9013f",
      "parents": [
        "13ff64c2db84f4e7cac3396700e333b48c42c7ee"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Mon Sep 07 15:52:27 2015 +0900"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Wed Sep 09 17:13:31 2015 +0900"
      },
      "message": "DO NOT MERGE Avoid size_t overflow in base64 decoding once again\n\nSwitch to foundation base64 function in OggExtractor and fix the\nissue there.\n\nBug: 23707088\nChange-Id: I999ae911177c88dc13f9ee9796ca93c5928b20b0\n"
    },
    {
      "commit": "69ae6a87342d5260d8d8660accc8aa1b9367dbbe",
      "tree": "42275af16d02cd3dbba6c7f3cfffa054a25da1ac",
      "parents": [
        "13ff64c2db84f4e7cac3396700e333b48c42c7ee"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Sep 04 09:13:37 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Sep 08 09:06:04 2015 -0700"
      },
      "message": "libstagefright: fix A_Refl to return immediately when there is an error.\n\nBug: 23609206\nChange-Id: I2ad25fb208df17f5a5b6d6b356eff2f400627f22\n(cherry picked from commit 715dcb9c90d86c1a02a0da056f3cee8875ad1230)\n"
    },
    {
      "commit": "13ff64c2db84f4e7cac3396700e333b48c42c7ee",
      "tree": "626467528e2ff75d1d312d6879988b5ec25eaab9",
      "parents": [
        "ab20313074bb109f29f677c3f09d5da1a48c94e7",
        "892354335d49f0b9fcd10e20e0c13e3cd0f1f1cb"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Thu Sep 03 17:21:20 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 03 17:21:20 2015 +0000"
      },
      "message": "Merge \"Zero out return values in media binder calls\" into klp-dev"
    },
    {
      "commit": "ab20313074bb109f29f677c3f09d5da1a48c94e7",
      "tree": "43eff05e498917c23428409d1ce19603572d2155",
      "parents": [
        "74888428e51a2aa123e301912d09973bd9310c33",
        "25a634427dec455b79d73562131985ae85b98c43"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Sep 03 17:16:12 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 03 17:16:12 2015 +0000"
      },
      "message": "Merge \"Make IEffect command more robust (second try)\" into klp-dev"
    },
    {
      "commit": "74888428e51a2aa123e301912d09973bd9310c33",
      "tree": "44d2d37355a454f5acf1e19945f7604a9278b688",
      "parents": [
        "9d916c771ca32cb2d0df27b85ce3e17bb6b48eaf",
        "d53aced041b7214a92b1f2fd5970d895bb9934e5"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Sep 03 17:05:55 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Sep 03 17:05:55 2015 +0000"
      },
      "message": "Merge \"Fix timedtext parsing\" into klp-dev"
    },
    {
      "commit": "9d916c771ca32cb2d0df27b85ce3e17bb6b48eaf",
      "tree": "2c077303c6072c6d648b9a1b68fb0607fc1afe5e",
      "parents": [
        "d26052738f7b095b7e318c8dde7f32db0a48450c"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Sep 01 11:14:18 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Sep 03 09:03:40 2015 -0700"
      },
      "message": "DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp\n\nAlso remove some CHECK\u0027s.\n\nBug: 23680780\nChange-Id: I62d0941e203e40209fa6fbe3f923f3efdc5a6c23\n(cherry picked from commit 7bb772e0c643ff3292599cf485b9dbf232bf39a4)\n"
    },
    {
      "commit": "d26052738f7b095b7e318c8dde7f32db0a48450c",
      "tree": "1b405a0f494c813126156bff30de0ebf0d6454c4",
      "parents": [
        "f394f12167fddbc755855d06b615509517c99f14"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Wed Sep 02 16:02:19 2015 +0900"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Thu Sep 03 06:15:02 2015 +0000"
      },
      "message": "Ogg: avoid size_t overflow in base64 decoding\n\nBug: 23707088\nChange-Id: I8d32841fee3213c721cdcc57788807ea64d19d74\n"
    },
    {
      "commit": "892354335d49f0b9fcd10e20e0c13e3cd0f1f1cb",
      "tree": "fc309fc843d7c9a627b59f0771c02edf4d1375ba",
      "parents": [
        "f394f12167fddbc755855d06b615509517c99f14"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Wed Sep 02 16:46:59 2015 -0700"
      },
      "committer": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Wed Sep 02 17:48:22 2015 -0700"
      },
      "message": "Zero out return values in media binder calls\n\nMore specifically when handling:\n* GET_STREAM_VOLUME in IAudioPolicyService, and\n* GET_CURRENT_POSITION and GET_DURATION in IMediaPlayer\n\nThis prevents leaking uninitialized values across binder in error cases.\n\nBug: 23756261\nChange-Id: I0ffd900ab12b685b0611259ade4a3efb1ec5defe\n"
    },
    {
      "commit": "25a634427dec455b79d73562131985ae85b98c43",
      "tree": "7eb4fe76d2239352ae39bf4ce75d7dc4f5e0d4bc",
      "parents": [
        "f394f12167fddbc755855d06b615509517c99f14"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue Sep 01 20:07:56 2015 +0000"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Wed Sep 02 17:52:12 2015 +0000"
      },
      "message": "Make IEffect command more robust (second try)\n\nBug: 23540907\nChange-Id: If30cfa535ad51521053706fc40fc98d893db5bc7\n(cherry picked from commit 10e6660cc5da65b027c90489ba7ac55d1504e012)\n"
    },
    {
      "commit": "d53aced041b7214a92b1f2fd5970d895bb9934e5",
      "tree": "fbbe3de134e7cb9f5c84034d95ef047988f22cfd",
      "parents": [
        "f394f12167fddbc755855d06b615509517c99f14"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 27 13:49:32 2015 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Aug 31 15:12:35 2015 +0000"
      },
      "message": "Fix timedtext parsing\n\nAdd bounds checking and fix other bugs.\n\nBug: 23284974\nBug: 23541506\nBug: 23542351\nBug: 23542352\nChange-Id: I53551efdf109ce1833e0c361efaf4cee7a851023\n"
    },
    {
      "commit": "f394f12167fddbc755855d06b615509517c99f14",
      "tree": "ba4c05bbdf64aa56ac6fc0c6bf789d23065b8b85",
      "parents": [
        "0981df6e3db106bfb7a56a2b668c012fcc34dd2c",
        "57bed83a539535bb64a33722fb67231119cb0618"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Fri Aug 28 20:49:57 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Aug 28 20:49:57 2015 +0000"
      },
      "message": "Merge \"libmedia: clear reply data for IEffect command\" into klp-dev"
    },
    {
      "commit": "0981df6e3db106bfb7a56a2b668c012fcc34dd2c",
      "tree": "dc6913625ac7d7897ae45adecc82cd9e454ebb6b",
      "parents": [
        "9a2be5d49d57b239bf6345f033eab01ba98f3889"
      ],
      "author": {
        "name": "Nick Kralevich",
        "email": "nnk@google.com",
        "time": "Thu Aug 20 09:56:39 2015 -0700"
      },
      "committer": {
        "name": "Nick Kralevich",
        "email": "nnk@google.com",
        "time": "Thu Aug 27 21:10:32 2015 +0000"
      },
      "message": "IMediaPlayer.cpp: make sure structures are initialized to 0\n\nCredit https://code.google.com/p/android/issues/detail?id\u003d183310\n\nBug: 23515142\nChange-Id: Idbd66fb148bd0ac1dd78f8651d0164f2a41e2427\n(cherry picked from commit b73b826cc16291b33649402497efbe0f946413bd)\n"
    },
    {
      "commit": "57bed83a539535bb64a33722fb67231119cb0618",
      "tree": "d27a064540c9761fd8c2c5f804232596f07e8bae",
      "parents": [
        "9a2be5d49d57b239bf6345f033eab01ba98f3889"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Wed Aug 26 16:34:33 2015 -0700"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Aug 27 00:06:18 2015 +0000"
      },
      "message": "libmedia: clear reply data for IEffect command\n\nBug: 23540907\nChange-Id: Ib89afc6b273b0eb310bbc5a1bd92b1e3d407c249\n"
    },
    {
      "commit": "9a2be5d49d57b239bf6345f033eab01ba98f3889",
      "tree": "e0417802932d787daf906e84938864898624c6be",
      "parents": [
        "a5f50e98d1408addcaaac27e4d13981163d12a15",
        "0f3e2daa1d56c98196a719a6e641f3ed67b8e7bf"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 25 04:00:04 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 25 04:00:04 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - Fix software video decoder buffer size calculation\" into klp-dev"
    },
    {
      "commit": "0f3e2daa1d56c98196a719a6e641f3ed67b8e7bf",
      "tree": "14f425887bc762b2a8d5f2d0dd521e931924eef0",
      "parents": [
        "af7e33f6043c0be1c0310d675884e3b263ca2438"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Jun 16 14:50:36 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Aug 24 16:07:03 2015 -0700"
      },
      "message": "DO NOT MERGE - Fix software video decoder buffer size calculation\n\nVarious software video decoders would specify the buffer size as if it were\nfully cropped, which then failed a sanity check in SoftwareRenderer.\nThey now return the full buffer size.\n\nBug: 21717327\nBug: 21443020\nChange-Id: I19fcd091827ebd52a95a5509281a07ccc156e0e5\n(cherry picked from commit 3ecc9db40b1fb9c7f807a5892e5c9625aac1fb06)\n"
    },
    {
      "commit": "a5f50e98d1408addcaaac27e4d13981163d12a15",
      "tree": "2706b904207936fc151c1de10781d614b1e5994b",
      "parents": [
        "af7e33f6043c0be1c0310d675884e3b263ca2438"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Jun 08 14:01:42 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Aug 24 22:40:48 2015 +0000"
      },
      "message": "DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data.\n\nBug: 21443020\nChange-Id: I63cf86217b8201fb41809c23e4b752b845a93ee2\n(cherry picked from commit 760f92f8b6da9c9cf128cb18fe3c09402fdde6cd)\n"
    },
    {
      "commit": "af7e33f6043c0be1c0310d675884e3b263ca2438",
      "tree": "5f5f7e097366757a2640ddb0cc5f5b65090d5f0f",
      "parents": [
        "dedaca6f04ac9f95fabe3b64d44cd1a2050f079e"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Aug 21 16:49:51 2015 -0700"
      },
      "committer": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Sun Aug 23 12:42:34 2015 +0000"
      },
      "message": "libstagefright: check overflow before memory allocation in OMXCodec.cpp\n\nBug: 23416608\nChange-Id: I4dacd38ed42db8f4887c3ee386dc909451f4346f\n"
    },
    {
      "commit": "dedaca6f04ac9f95fabe3b64d44cd1a2050f079e",
      "tree": "aac33f0ddaaae3cf66043bb3e801fc53a635afbe",
      "parents": [
        "3b42241aab5855964d1bd60268ae21c2d9cc6065"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Jun 04 11:01:15 2015 -0700"
      },
      "committer": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Fri Aug 21 21:34:14 2015 -0700"
      },
      "message": "Limit allocations to avoid out-of-memory\n\nCorrupt files could cause very large allocations, limit them to something\nmore reasonable.\n\nBug: 17769851\nChange-Id: Ib0f722fd6fddff873bd7a547aac456e608c34c84\n"
    },
    {
      "commit": "3b42241aab5855964d1bd60268ae21c2d9cc6065",
      "tree": "26b23cae8b66ba01e49d516e1ee7a19519dc949a",
      "parents": [
        "d8816a13dbcafd5d61d26a8a6b2e892452bca1a7",
        "c580c836c1941fb4912e1dd4e08626caf98a62c7"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Sat Aug 22 00:54:32 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Sat Aug 22 00:54:32 2015 +0000"
      },
      "message": "Merge \"Prevent integer issues in ID3::Iterator::findFrame\" into klp-dev"
    },
    {
      "commit": "c580c836c1941fb4912e1dd4e08626caf98a62c7",
      "tree": "11be8eb2577972b3c522503701a59af125ca0729",
      "parents": [
        "916a9684295fb578f4b3c6c16b621ef201a49964"
      ],
      "author": {
        "name": "Joshua J. Drake",
        "email": "android-open-source@qoop.org",
        "time": "Sat Aug 15 08:17:03 2015 -0500"
      },
      "committer": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Fri Aug 21 16:06:23 2015 -0700"
      },
      "message": "Prevent integer issues in ID3::Iterator::findFrame\n\nInteger overflows could occur a few places within findFrame. These can lead to\nout-of-bounds reads and potentially infinite loops. Ensure that arithmetic does\nnot wrap around to prevent these behaviors.\n\nBug: 23285192\nChange-Id: I72a61df7d5719d1d3f2bd0b37fba86f0f4bbedee\n"
    },
    {
      "commit": "d8816a13dbcafd5d61d26a8a6b2e892452bca1a7",
      "tree": "cfc5148417101a6c3b7008179ab6dd5b29b836d3",
      "parents": [
        "8de6d690ae5843bd8e005deedea571596f79bbd3"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Jun 25 11:46:54 2015 -0700"
      },
      "committer": {
        "name": "Nick Kralevich",
        "email": "nnk@google.com",
        "time": "Fri Aug 21 12:36:27 2015 -0700"
      },
      "message": "DO NOT MERGE libstagefright: Fix crash in convertMetaDataToMessage\n\n- The ABuffer used for the Message has a preset value of 1024, if\n  flattening the meta data exceeds this value, a check fails hence\n  the crash.\n- This change creates a new ABuffer if the buffer size would exceed\n  the buffer capacity.\n\nBug: 22771132\n\nCRs-Fixed: 857850\n\n(cherry picked from commit 4bce636865bdf0e2a79fc9a5d9a69107649c850d)\n\nChange-Id: Ia0a963e9872f646791e75b710ff9e227a66af4f9\n"
    },
    {
      "commit": "8de6d690ae5843bd8e005deedea571596f79bbd3",
      "tree": "de83a9d8986206f202dd2c34bd62116be39474d6",
      "parents": [
        "c2153d0dc800d0718788dccd0f2a2d29f4647c03"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Fri Aug 21 09:58:12 2015 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Fri Aug 21 18:32:29 2015 +0000"
      },
      "message": "Fix build break DO NOT MERGE\n\nrelated-to-bug: 23223325\n\nChange-Id: I7b09712b5f18912abddd50b75f6edaf860e894c1\n"
    },
    {
      "commit": "c2153d0dc800d0718788dccd0f2a2d29f4647c03",
      "tree": "24cd6439538e4bf3fd0007757d86dbcb63a465a9",
      "parents": [
        "5aa887ef44238e9a727564fe9051933f8b42e399"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Aug 17 17:57:47 2015 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Thu Aug 20 14:55:35 2015 -0700"
      },
      "message": "DO NOT MERGE Part of fix for libmedia OOB write anywhere\n\nClarify that decrypt destination is not a pointer for\nsecure case.\n\nb/23223325\n\nChange-Id: I642dcf790a9eb9e32175f3e0d8f040c82228e3ac\n(cherry picked from commit ed555d70d80964f40563d89a4e6d6a80f83f4b89)\n"
    },
    {
      "commit": "5aa887ef44238e9a727564fe9051933f8b42e399",
      "tree": "45e6c5d00c653db833f26e6f14e2adb26cf3871c",
      "parents": [
        "8a064aa83ad590b61ddd84e678c59f0d1f68106c",
        "59bfb7aa42ce2404da2547e7852e1a1215c6af22"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 20:17:34 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 20:17:34 2015 +0000"
      },
      "message": "am 59bfb7aa: (-s ours) am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u002759bfb7aa42ce2404da2547e7852e1a1215c6af22\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "59bfb7aa42ce2404da2547e7852e1a1215c6af22",
      "tree": "f761d21bfae5e0e042ee41ae0fb43fc149850f07",
      "parents": [
        "9d9491f9fb83523cfe68f2aa26c14f72f70812fc",
        "18a8124f582e9d763670e3bcc6ef6b2b00c4d394"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 20:11:03 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 20:11:03 2015 +0000"
      },
      "message": "am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u002718a8124f582e9d763670e3bcc6ef6b2b00c4d394\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "18a8124f582e9d763670e3bcc6ef6b2b00c4d394",
      "tree": "62abbda0ae5ac64359add878f6adfbd59098b55e",
      "parents": [
        "0dbd0d7bfe340ac46271c7f87969431b62a023ed",
        "da0a48d2704b231f13dbdb28cc4c4d12b08e3faf"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:53:55 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:53:55 2015 +0000"
      },
      "message": "am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u0027da0a48d2704b231f13dbdb28cc4c4d12b08e3faf\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "da0a48d2704b231f13dbdb28cc4c4d12b08e3faf",
      "tree": "7a2fa8ee998e8d01518e93e19ba9090cd438df51",
      "parents": [
        "c99244105803ac32f4cc698b5b2a85b225d925a2",
        "6020f06633f8cac09f47e561cc389c5b9b152464"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:46:41 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:46:41 2015 +0000"
      },
      "message": "am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u00276020f06633f8cac09f47e561cc389c5b9b152464\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "6020f06633f8cac09f47e561cc389c5b9b152464",
      "tree": "d40a01deb5043dbf7c1f01c29165f74719b1b717",
      "parents": [
        "2fe61ed032e083dc39265f3b88274fcb8fbeed9b",
        "b294a97a6fed15d379ce11084166780e7d9dd883"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:41:14 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:41:14 2015 +0000"
      },
      "message": "am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u0027b294a97a6fed15d379ce11084166780e7d9dd883\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "b294a97a6fed15d379ce11084166780e7d9dd883",
      "tree": "dcd7a6d38c54741226217640d97390577d0c841b",
      "parents": [
        "3b8d3fa0dd97c05f77c4686986812e40203678d2",
        "6cba5819ab84cc58a8273428dcf9ae98c0c9bc42"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:32:06 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:32:06 2015 +0000"
      },
      "message": "am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u00276cba5819ab84cc58a8273428dcf9ae98c0c9bc42\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "6cba5819ab84cc58a8273428dcf9ae98c0c9bc42",
      "tree": "dcd7a6d38c54741226217640d97390577d0c841b",
      "parents": [
        "186d1fb9b72439c1c3317d72e4a0f52f466e6861",
        "51bfaf6cf74498f92cd400e4d5b3d55b04fc7a06"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:25:42 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:25:42 2015 +0000"
      },
      "message": "am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u002751bfaf6cf74498f92cd400e4d5b3d55b04fc7a06\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "51bfaf6cf74498f92cd400e4d5b3d55b04fc7a06",
      "tree": "065653ca656c926c0c7e8fcf2b3326cf80c0e196",
      "parents": [
        "f4dfe12ecd26e7d6965a2abc062709b6d7d942c4",
        "1afea5517477554f452396c29db375e34d108f89"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:18:30 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:18:30 2015 +0000"
      },
      "message": "am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u00271afea5517477554f452396c29db375e34d108f89\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "1afea5517477554f452396c29db375e34d108f89",
      "tree": "0c15d1d2b118f34fc25eddbb80dcaacf73318c3f",
      "parents": [
        "54d88fe2f17b1c5c6e4d0d1d1e36089fea3a1df0",
        "ce73af077199122e0e5a80b019f949d0f181410f"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 19:12:29 2015 +0000"
      },
      "committer": {
        "name": "Android Git Automerger",
        "email": "android-git-automerger@android.com",
        "time": "Thu Aug 20 19:12:29 2015 +0000"
      },
      "message": "am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure\n\n* commit \u0027ce73af077199122e0e5a80b019f949d0f181410f\u0027:\n  DO NOT MERGE Fail more gracefully on allocation failure\n"
    },
    {
      "commit": "8a064aa83ad590b61ddd84e678c59f0d1f68106c",
      "tree": "45e6c5d00c653db833f26e6f14e2adb26cf3871c",
      "parents": [
        "522019f15b3c191b73d1a0ddb56aeb3dd6b7ce31",
        "3878b990f7d53eae7c2cf9246b6ef2db5a049872"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 18:05:08 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Aug 20 18:05:08 2015 +0000"
      },
      "message": "Merge \"Fail more gracefully on allocation failure\" into klp-dev"
    },
    {
      "commit": "ce73af077199122e0e5a80b019f949d0f181410f",
      "tree": "c8f1e5ccd45f35ef686e8136ea3451c53d36bba8",
      "parents": [
        "aa8dab77aa9ef1bb6e5414ee5e773001de725bef"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Jun 13 14:13:44 2014 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Aug 20 18:01:20 2015 +0000"
      },
      "message": "DO NOT MERGE Fail more gracefully on allocation failure\n\nCheck allocations when the size is read from a file and might therefore\nbe invalid.\n\nb/14388161\n\nChange-Id: Ia08cc0a6107f275a70e793ef3b50c0ce16ceeee0\n"
    },
    {
      "commit": "522019f15b3c191b73d1a0ddb56aeb3dd6b7ce31",
      "tree": "bbed47079f06124d972e5f1d8bff8d00ea3b4794",
      "parents": [
        "635d38a84414e26aaf6c4b5df7859fde196adeaf",
        "108cd2dc8df55f3f2ecdfbb4bb0ae981a74b6860"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Aug 20 04:27:23 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Aug 20 04:27:23 2015 +0000"
      },
      "message": "Merge \"libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable.\" into klp-dev"
    },
    {
      "commit": "635d38a84414e26aaf6c4b5df7859fde196adeaf",
      "tree": "e199c5f7c141ede4bf3a46996a9a6b70dfd8c0df",
      "parents": [
        "2c880dde90e4303f9201f46124ee879325c57ba0",
        "4d46f6f18f5160b8992ec1e66ef1844212fc7d48"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Thu Aug 20 04:10:51 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Aug 20 04:10:51 2015 +0000"
      },
      "message": "Merge \"Check RTSP payload length\" into klp-dev"
    },
    {
      "commit": "2c880dde90e4303f9201f46124ee879325c57ba0",
      "tree": "1046e8298b670c9aa23252f535fc3f9510bb2718",
      "parents": [
        "6ae815e04f618207da9ce52e3c828492c33a7107",
        "ba6093a4c6997b9d36d9700ee8c974941bf82e3a"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Thu Aug 20 04:06:25 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Aug 20 04:06:25 2015 +0000"
      },
      "message": "Merge \"Sanity check padding/delay values for gapless playback\" into klp-dev"
    },
    {
      "commit": "6ae815e04f618207da9ce52e3c828492c33a7107",
      "tree": "42f8cf5d811238df117abba1a9848b32c6f2d8fb",
      "parents": [
        "b2ae4351539de9aa4667fcb3e02ba40d9c6bd094",
        "937c6bedd4b6e5c6cb29a238eb459047dedd3486"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Aug 20 04:01:18 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Thu Aug 20 04:01:18 2015 +0000"
      },
      "message": "Merge \"libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets.\" into klp-dev"
    },
    {
      "commit": "937c6bedd4b6e5c6cb29a238eb459047dedd3486",
      "tree": "de9072b197da1e8b0e7ebe6a0ea2f162237d191d",
      "parents": [
        "916a9684295fb578f4b3c6c16b621ef201a49964"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Aug 18 14:32:16 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Aug 20 03:53:44 2015 +0000"
      },
      "message": "libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets.\n\nBug: 23270724\nChange-Id: Id7ba55c7bf6860fbfc892bbb6378aac644c82da4\n(cherry picked from commit c51ab7dd82bf4e24666fc72a55e03e2f530204d5)\n"
    },
    {
      "commit": "b2ae4351539de9aa4667fcb3e02ba40d9c6bd094",
      "tree": "aa8ac42170bb5e669d625f7bc351327780feda61",
      "parents": [
        "916a9684295fb578f4b3c6c16b621ef201a49964"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Aug 19 17:31:51 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Aug 20 03:36:58 2015 +0000"
      },
      "message": "libstagefright: fix overflow in pvdec_api.cpp.\n\nBug: 20674086\nChange-Id: Ie2c711865c3b92f3fa2f3c7a436fa0e3687eb8b3\n(cherry picked from commit d7bb1cd786e5ea4ac61119cc1a08082474f7787b)\n"
    },
    {
      "commit": "4d46f6f18f5160b8992ec1e66ef1844212fc7d48",
      "tree": "e14bc1113d9b6ed64a615a67332fb937ab1403cb",
      "parents": [
        "f97b6beeb2e2f0977d1c7fa8d2aaafe4e2f4d68a"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Aug 19 15:36:12 2015 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Aug 19 15:38:15 2015 -0700"
      },
      "message": "Check RTSP payload length\n\nBug: 23346388\nChange-Id: Ifd918cefc90527c2f52177c3ce0da7a13259ad08\n"
    },
    {
      "commit": "108cd2dc8df55f3f2ecdfbb4bb0ae981a74b6860",
      "tree": "86860e2d3f5c7373f0e03a82c8deb5ee22f38a77",
      "parents": [
        "916a9684295fb578f4b3c6c16b621ef201a49964"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Aug 18 11:17:24 2015 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Aug 19 11:48:19 2015 -0700"
      },
      "message": "libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable.\n\nBug: 23247055\nChange-Id: I29ef59c7ff09248063714e5013f7c33f66c5eebd\n(cherry picked from commit 3564c4562f46bede6ef1ea716c4fd4f77e470ae8)\n"
    },
    {
      "commit": "3878b990f7d53eae7c2cf9246b6ef2db5a049872",
      "tree": "30beb7e7b1bca4c232f781bf0e973ae6df450166",
      "parents": [
        "f97b6beeb2e2f0977d1c7fa8d2aaafe4e2f4d68a"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Jun 13 14:13:44 2014 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Aug 19 09:39:02 2015 -0700"
      },
      "message": "Fail more gracefully on allocation failure\n\nCheck allocations when the size is read from a file and might therefore\nbe invalid.\n\nb/14388161\n\nChange-Id: Ia08cc0a6107f275a70e793ef3b50c0ce16ceeee0\n"
    },
    {
      "commit": "916a9684295fb578f4b3c6c16b621ef201a49964",
      "tree": "4c1a4cabe7ff1ebac46444e1d91bd4ae9b17a9c5",
      "parents": [
        "877c76ac42701859fb8185f05c4724a06867fc07",
        "22ac20eff5b67f33b9d04ca54abeaa22ce201039"
      ],
      "author": {
        "name": "Eric Laurent",
        "email": "elaurent@google.com",
        "time": "Tue Aug 18 21:33:46 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 21:33:46 2015 +0000"
      },
      "message": "Merge \"DO NOT MERGE - audio flinger: fix fuzz test crash\" into klp-dev"
    },
    {
      "commit": "877c76ac42701859fb8185f05c4724a06867fc07",
      "tree": "01b5c74709088c02ad0be92c595c948dde5eb988",
      "parents": [
        "f97b6beeb2e2f0977d1c7fa8d2aaafe4e2f4d68a",
        "8ec845c8fe0f03bc57c901bc484541bdd6a7cf80"
      ],
      "author": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Tue Aug 18 16:55:38 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 16:55:38 2015 +0000"
      },
      "message": "Merge \"stagefright: check IMemory::pointer() before using the allocation\" into klp-dev"
    },
    {
      "commit": "ba6093a4c6997b9d36d9700ee8c974941bf82e3a",
      "tree": "8f295f522d965924e9b4e4aff2c7d34a06dc4221",
      "parents": [
        "f97b6beeb2e2f0977d1c7fa8d2aaafe4e2f4d68a"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Aug 18 09:55:24 2015 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Aug 18 09:55:24 2015 -0700"
      },
      "message": "Sanity check padding/delay values for gapless playback\n\nBug: 23306638\nChange-Id: I2b5160e0f58f90d3f67c3964f41f5734ec0da053\n"
    },
    {
      "commit": "f97b6beeb2e2f0977d1c7fa8d2aaafe4e2f4d68a",
      "tree": "cc19b2094c6e098fab0ad87d96662963024038f5",
      "parents": [
        "2ed42aea9c6fbca4bde52d647ff082b997b5968c",
        "b158a9a5bcfe21480f57bc58d45517f1a81cca39"
      ],
      "author": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Tue Aug 18 15:04:20 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 15:04:20 2015 +0000"
      },
      "message": "Merge \"Check integer overflow to prevent memory corruption\" into klp-dev"
    },
    {
      "commit": "2ed42aea9c6fbca4bde52d647ff082b997b5968c",
      "tree": "f9029c9705e97eb235c53ba8f9d29cfe87b0f8fa",
      "parents": [
        "0d46c93785e2c426be11172bec0489b698fea6c3",
        "734e65e6e7e1ee863781c1ebd87003933bb4a752"
      ],
      "author": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Tue Aug 18 15:00:42 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 15:00:42 2015 +0000"
      },
      "message": "Merge \"do not dequeue from native window after we hit fatal error -- DO NOT MERGE\" into klp-dev"
    },
    {
      "commit": "0d46c93785e2c426be11172bec0489b698fea6c3",
      "tree": "d85768c73eae26399e188ee1fa069b7aac04c7ea",
      "parents": [
        "aa1cc74139341eb3ae9511af5310b965dbf890f4",
        "f810a8298aea13fa177060cdc10c8297eac69c49"
      ],
      "author": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Tue Aug 18 14:25:45 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 14:25:45 2015 +0000"
      },
      "message": "Merge \"MPEG4Source::fragmentedRead: check range before writing into buffers\" into klp-dev"
    },
    {
      "commit": "aa1cc74139341eb3ae9511af5310b965dbf890f4",
      "tree": "ad6d1edf7993e45e4aaa9c4412791cda0a192b07",
      "parents": [
        "6efa86beff54332cbf7bbd4949b0c38c1ec8c5cd",
        "f11e95b21007f24e5ab77298370855f9f085b2d7"
      ],
      "author": {
        "name": "Jon Larimer",
        "email": "jlarimer@google.com",
        "time": "Tue Aug 18 14:24:26 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 14:24:26 2015 +0000"
      },
      "message": "Merge \"Check buffer size before using it\" into klp-dev"
    },
    {
      "commit": "6efa86beff54332cbf7bbd4949b0c38c1ec8c5cd",
      "tree": "c28630e1e229a01959f929c56894695525ff988d",
      "parents": [
        "6f561b93d8c6473fa0baa281ad4a53f882e656cc",
        "073e4f6748f5d7deb095c42fad9271cb99e22d07"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 18 13:28:34 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 13:28:34 2015 +0000"
      },
      "message": "Merge \"Check vector size before accessing\" into klp-dev"
    },
    {
      "commit": "6f561b93d8c6473fa0baa281ad4a53f882e656cc",
      "tree": "6754377500a18f33e295c69bc0a46a9269e7d8c1",
      "parents": [
        "c37f7f6fa0cb7f55cdc5b2d4ccbf2c87c3bc6c3b",
        "407d475b797fdc595299d67151230dc6e3835ccd"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 18 13:24:21 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 13:24:21 2015 +0000"
      },
      "message": "Merge \"MatroskaExtractor: detect infinite loop when parsing NALs\" into klp-dev"
    },
    {
      "commit": "407d475b797fdc595299d67151230dc6e3835ccd",
      "tree": "0924f43fb9ccf6ebbf227b9da67d74b570766307",
      "parents": [
        "deba0610c89d54390c9d2d0a0f3b79fd7679779c"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Thu Jul 16 15:04:12 2015 -0700"
      },
      "committer": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 18 02:33:07 2015 +0000"
      },
      "message": "MatroskaExtractor: detect infinite loop when parsing NALs\n\nBug: 21335999\nChange-Id: I76bd34610e52048ffcf16e41aa6175afc8a14ee4\n(cherry picked from commit 2dcf6138ebc9c5688aeae151d2fbde55a2826128)\n"
    },
    {
      "commit": "c37f7f6fa0cb7f55cdc5b2d4ccbf2c87c3bc6c3b",
      "tree": "b29d7f3b35fcb42b4d696b2a1a68399e2758e52c",
      "parents": [
        "deba0610c89d54390c9d2d0a0f3b79fd7679779c"
      ],
      "author": {
        "name": "Neel Mehta",
        "email": "nmehta@google.com",
        "time": "Fri Aug 14 17:38:48 2015 -0700"
      },
      "committer": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 18 02:12:26 2015 +0000"
      },
      "message": "Fix for memory corruption in ID3::removeUnsynchronizationV2_4().\nBug: 23227354\n\nChange-Id: Iaa36cfda4fd84ca7e039f56086fd61b4118020db\n(cherry picked from commit 77e23413a539df16503e356bd4df4a952f3abc47)\n"
    },
    {
      "commit": "deba0610c89d54390c9d2d0a0f3b79fd7679779c",
      "tree": "a483e8e26de32fe590d98811c3fa8e3aa37f6473",
      "parents": [
        "9abb7401df730b5c510f6b8dac2716a0928d9623",
        "12bd1d2697f0d39f6c70f31d06f2f74c57e1d89f"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Tue Aug 18 01:31:42 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 01:31:42 2015 +0000"
      },
      "message": "Merge \"Revert \"Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4\"\" into klp-dev"
    },
    {
      "commit": "9abb7401df730b5c510f6b8dac2716a0928d9623",
      "tree": "5b02dde8e1c90ab3ecee53a26458b16bb28ae6bb",
      "parents": [
        "1a09d3521e8849dcb1090ecb50393f6e9ee140ec"
      ],
      "author": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Mon Aug 17 18:24:11 2015 -0700"
      },
      "committer": {
        "name": "Abhishek Arya",
        "email": "aarya@google.com",
        "time": "Mon Aug 17 18:24:11 2015 -0700"
      },
      "message": "Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4\n\nBug: 20674086\nChange-Id: I2ee6b7e0eabbf696c0986d08b2d759d48cb9eb7b\n"
    },
    {
      "commit": "22ac20eff5b67f33b9d04ca54abeaa22ce201039",
      "tree": "e0fcb0e06bb14a3e9d34a514be6e912e6b6c8192",
      "parents": [
        "1a09d3521e8849dcb1090ecb50393f6e9ee140ec"
      ],
      "author": {
        "name": "Eric Laurent",
        "email": "elaurent@google.com",
        "time": "Fri May 08 10:50:03 2015 -0700"
      },
      "committer": {
        "name": "Eric Laurent",
        "email": "elaurent@google.com",
        "time": "Mon Aug 17 18:11:04 2015 -0700"
      },
      "message": "DO NOT MERGE - audio flinger: fix fuzz test crash\n\nClear output stream pointer in duplicating thread\nwhen the main output to which it is attached is closed.\n\nAlso do not forward master mute and volume commands to\nduplicating threads as this is not applicable.\n\nAlso fix logic in AudioFlinger::primaryPlaybackThread_l()\nthat could accidentally return a duplicating thread.\nThis never happens because the primary thread is always\nfirst in the list.\n\nBug: 20731946.\nChange-Id: Ic8869699836920351b23d09544c50a258d3fb585\n"
    },
    {
      "commit": "1a09d3521e8849dcb1090ecb50393f6e9ee140ec",
      "tree": "94569b4362815e1d20ffa4086499b9bc94f31d41",
      "parents": [
        "c23e3dd8af7397f023aae040c4a03dd14091cbed",
        "d2ebc0b9e147f9406db20ec4df61da50e3614ee4"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Aug 18 00:48:01 2015 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Aug 18 00:48:01 2015 +0000"
      },
      "message": "Merge \"libstagefright: check remaining data size before parsing it.\" into klp-dev"
    }
  ],
  "next": "12bd1d2697f0d39f6c70f31d06f2f74c57e1d89f"
}