1. 6272fa1 Merge "DO NOT MERGE Fix vulnerability in mediaserver" into klp-dev by Jeff Tinker · 11 years ago
  2. f43125e Merge "Fix for security vulnerability in media server DO NOT MERGE" into klp-dev by Jeff Tinker · 11 years ago
  3. ae92251 Merge "DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel." into klp-dev by Wei Jia · 11 years ago
  4. d386c5b Merge "Fix heap data leak vulnerability" into klp-dev by Jeff Tinker · 11 years ago
  5. 636539e DO NOT MERGE Fix vulnerability in mediaserver by Jeff Tinker · 11 years ago
  6. 8336fc4 DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel. by Wei Jia · 11 years ago
  7. b21a642 Merge "DO NOT MERGE NuCachedSource2: fix possible erroneous early free" into klp-dev by Wonsik Kim · 11 years ago
  8. 09ed70f Fix heap data leak vulnerability by Jeff Tinker · 11 years ago
  9. 9adc728 Fix for security vulnerability in media server DO NOT MERGE by Jeff Tinker · 11 years ago
  10. c894f81 DO NOT MERGE NuCachedSource2: fix possible erroneous early free by Wonsik Kim · 11 years ago
  11. 741a335 Merge "DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel." into klp-dev by Wei Jia · 11 years ago
  12. b659b4c Merge "DO NOT MERGE fix build" into klp-dev by Wonsik Kim · 11 years ago
  13. 9104e70 DO NOT MERGE fix build by Wonsik Kim · 11 years ago
  14. 1784a8d Merge "DO NOT MERGE Avoid size_t overflow in base64 decoding once again" into klp-dev by Wonsik Kim · 11 years ago
  15. 5f2a76f DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel. by Wei Jia · 11 years ago
  16. 278ed11 DO NOT MERGE Avoid size_t overflow in base64 decoding once again by Wonsik Kim · 11 years ago
  17. 69ae6a8 libstagefright: fix A_Refl to return immediately when there is an error. by Wei Jia · 11 years ago
  18. 13ff64c Merge "Zero out return values in media binder calls" into klp-dev by Robert Shih · 11 years ago
  19. ab20313 Merge "Make IEffect command more robust (second try)" into klp-dev by Andy Hung · 11 years ago
  20. 7488842 Merge "Fix timedtext parsing" into klp-dev by Marco Nelissen · 11 years ago
  21. 9d916c7 DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp by Wei Jia · 11 years ago
  22. d260527 Ogg: avoid size_t overflow in base64 decoding by Wonsik Kim · 11 years ago
  23. 8923543 Zero out return values in media binder calls by Robert Shih · 11 years ago
  24. 25a6344 Make IEffect command more robust (second try) by Andy Hung · 11 years ago
  25. d53aced Fix timedtext parsing by Marco Nelissen · 11 years ago
  26. f394f12 Merge "libmedia: clear reply data for IEffect command" into klp-dev by Andy Hung · 11 years ago
  27. 0981df6 IMediaPlayer.cpp: make sure structures are initialized to 0 by Nick Kralevich · 11 years ago
  28. 57bed83 libmedia: clear reply data for IEffect command by Andy Hung · 11 years ago
  29. 9a2be5d Merge "DO NOT MERGE - Fix software video decoder buffer size calculation" into klp-dev by Abhishek Arya · 11 years ago
  30. 0f3e2da DO NOT MERGE - Fix software video decoder buffer size calculation by Marco Nelissen · 11 years ago
  31. a5f50e9 DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data. by Wei Jia · 11 years ago
  32. af7e33f libstagefright: check overflow before memory allocation in OMXCodec.cpp by Wei Jia · 11 years ago
  33. dedaca6 Limit allocations to avoid out-of-memory by Marco Nelissen · 11 years ago
  34. 3b42241 Merge "Prevent integer issues in ID3::Iterator::findFrame" into klp-dev by Robert Shih · 11 years ago
  35. c580c83 Prevent integer issues in ID3::Iterator::findFrame by Joshua J. Drake · 11 years ago
  36. d8816a1 DO NOT MERGE libstagefright: Fix crash in convertMetaDataToMessage by Wei Jia · 11 years ago
  37. 8de6d69 Fix build break DO NOT MERGE by Jeff Tinker · 11 years ago
  38. c2153d0 DO NOT MERGE Part of fix for libmedia OOB write anywhere by Jeff Tinker · 11 years ago
  39. 5aa887e am 59bfb7aa: (-s ours) am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  40. 59bfb7a am 18a8124f: am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  41. 18a8124 am da0a48d2: (-s ours) am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  42. da0a48d am 6020f066: am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  43. 6020f06 am b294a97a: am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  44. b294a97 am 6cba5819: am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  45. 6cba581 am 51bfaf6c: am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  46. 51bfaf6 am 1afea551: am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  47. 1afea55 am ce73af07: DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 11 years ago
  48. 8a064aa Merge "Fail more gracefully on allocation failure" into klp-dev by Marco Nelissen · 11 years ago
  49. ce73af0 DO NOT MERGE Fail more gracefully on allocation failure by Marco Nelissen · 12 years ago
  50. 522019f Merge "libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable." into klp-dev by Wei Jia · 11 years ago
  51. 635d38a Merge "Check RTSP payload length" into klp-dev by Abhishek Arya · 11 years ago
  52. 2c880dd Merge "Sanity check padding/delay values for gapless playback" into klp-dev by Abhishek Arya · 11 years ago
  53. 6ae815e Merge "libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets." into klp-dev by Wei Jia · 11 years ago
  54. 937c6be libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets. by Wei Jia · 11 years ago
  55. b2ae435 libstagefright: fix overflow in pvdec_api.cpp. by Wei Jia · 11 years ago
  56. 4d46f6f Check RTSP payload length by Marco Nelissen · 11 years ago
  57. 108cd2d libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable. by Wei Jia · 11 years ago
  58. 3878b99 Fail more gracefully on allocation failure by Marco Nelissen · 12 years ago
  59. 916a968 Merge "DO NOT MERGE - audio flinger: fix fuzz test crash" into klp-dev by Eric Laurent · 11 years ago
  60. 877c76a Merge "stagefright: check IMemory::pointer() before using the allocation" into klp-dev by Chong Zhang · 11 years ago
  61. ba6093a Sanity check padding/delay values for gapless playback by Marco Nelissen · 11 years ago
  62. f97b6be Merge "Check integer overflow to prevent memory corruption" into klp-dev by Jon Larimer · 11 years ago
  63. 2ed42ae Merge "do not dequeue from native window after we hit fatal error -- DO NOT MERGE" into klp-dev by Jon Larimer · 11 years ago
  64. 0d46c93 Merge "MPEG4Source::fragmentedRead: check range before writing into buffers" into klp-dev by Jon Larimer · 11 years ago
  65. aa1cc74 Merge "Check buffer size before using it" into klp-dev by Jon Larimer · 11 years ago
  66. 6efa86b Merge "Check vector size before accessing" into klp-dev by Abhishek Arya · 11 years ago
  67. 6f561b9 Merge "MatroskaExtractor: detect infinite loop when parsing NALs" into klp-dev by Abhishek Arya · 11 years ago
  68. 407d475 MatroskaExtractor: detect infinite loop when parsing NALs by Robert Shih · 11 years ago
  69. c37f7f6 Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354 by Neel Mehta · 11 years ago
  70. deba061 Merge "Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"" into klp-dev by Abhishek Arya · 11 years ago
  71. 9abb740 Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4 by Abhishek Arya · 11 years ago
  72. 22ac20e DO NOT MERGE - audio flinger: fix fuzz test crash by Eric Laurent · 11 years ago
  73. 1a09d35 Merge "libstagefright: check remaining data size before parsing it." into klp-dev by Wei Jia · 11 years ago
  74. 12bd1d2 Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4" by Abhishek Arya · 11 years ago
  75. f810a82 MPEG4Source::fragmentedRead: check range before writing into buffers by Robert Shih · 11 years ago
  76. c23e3dd Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4 by Abhishek Arya · 11 years ago
  77. 567b655 Merge "SoftAVCEnc: check requested memory size before allocation." into klp-dev by Wei Jia · 11 years ago
  78. 94c1969 Merge "libstagefright: check memory size for overflow before allocation." into klp-dev by Abhishek Arya · 11 years ago
  79. 8ec845c stagefright: check IMemory::pointer() before using the allocation by Chong Zhang · 11 years ago
  80. 734e65e do not dequeue from native window after we hit fatal error -- DO NOT MERGE by Chong Zhang · 11 years ago
  81. d2ebc0b libstagefright: check remaining data size before parsing it. by Wei Jia · 11 years ago
  82. 3fd9668 SoftAVCEnc: check requested memory size before allocation. by Wei Jia · 11 years ago
  83. 120f259 Merge "ABuffer: reset members when memory allocation fails." into klp-dev by Wei Jia · 11 years ago
  84. fc8c226 Merge "Revert "SoftAVCEnc: check requested memory size before allocation."" into klp-dev by Wei Jia · 11 years ago
  85. 98e68e8 Revert "SoftAVCEnc: check requested memory size before allocation." by Wei Jia · 11 years ago
  86. 74d3170 Merge "Fix comparison sign warnings." into klp-dev by Wei Jia · 11 years ago
  87. b158a9a Check integer overflow to prevent memory corruption by Jeff Tinker · 11 years ago
  88. f11e95b Check buffer size before using it by Marco Nelissen · 11 years ago
  89. 7e9ac35 Fix comparison sign warnings. by Dan Albert · 11 years ago
  90. 7913508 ABuffer: reset members when memory allocation fails. by Wei Jia · 11 years ago
  91. 479b4de SoftAVCEnc: check requested memory size before allocation. by Wei Jia · 11 years ago
  92. 073e4f6 Check vector size before accessing by Marco Nelissen · 11 years ago
  93. b62a73b libstagefright: check memory size for overflow before allocation. by Wei Jia · 11 years ago
  94. 3ce2938 libstagefright: fix possible overflow in amrwbenc. by Wei Jia · 11 years ago
  95. f51115b libstagefright: fix possible overflow in ID3. by Wei Jia · 11 years ago
  96. c86eae3 am 9d9491f9: am 0dbd0d7b: am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  97. 9d9491f am 0dbd0d7b: am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  98. 0dbd0d7 am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  99. c992441 am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  100. 2fe61ed am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago