1. b1a13d0 Merge "stagefright: MPEG4Extractor: allow 'hdlr' box before first track" into klp-dev by Jon Larimer · 11 years ago
  2. 3b4a72a Merge "DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer." into klp-dev by Wei Jia · 11 years ago
  3. 4a03d78 DO NOT MERGE - OMX: allow only secure codec to remotely call allocateBuffer. by Wei Jia · 11 years ago
  4. 7ed8d1e ID3: check possible integer overflow for extendedHeaderSize and paddingSize. by Wei Jia · 11 years ago
  5. 74d1927 Merge "Check NAL size before use" into klp-dev by Marco Nelissen · 11 years ago
  6. 9ab9c85 Merge "MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData." into klp-dev by Wei Jia · 11 years ago
  7. 5d10129 Check NAL size before use by Marco Nelissen · 11 years ago
  8. e6d904f MPEG4Extractor: ensure buffer size is not less than 8 for LastCommentData. by Wei Jia · 11 years ago
  9. 257b3bc Don't crash when there's no conceal frame by Marco Nelissen · 11 years ago
  10. 302b546 stagefright: MPEG4Extractor: allow 'hdlr' box before first track by Lajos Molnar · 11 years ago
  11. 3737a3f DO NOT MERGE stagefright: fix AMessage::FromParcel by Flanker · 11 years ago
  12. 6272fa1 Merge "DO NOT MERGE Fix vulnerability in mediaserver" into klp-dev by Jeff Tinker · 11 years ago
  13. f43125e Merge "Fix for security vulnerability in media server DO NOT MERGE" into klp-dev by Jeff Tinker · 11 years ago
  14. 636539e DO NOT MERGE Fix vulnerability in mediaserver by Jeff Tinker · 11 years ago
  15. 8336fc4 DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel. by Wei Jia · 11 years ago
  16. b21a642 Merge "DO NOT MERGE NuCachedSource2: fix possible erroneous early free" into klp-dev by Wonsik Kim · 11 years ago
  17. 9adc728 Fix for security vulnerability in media server DO NOT MERGE by Jeff Tinker · 11 years ago
  18. c894f81 DO NOT MERGE NuCachedSource2: fix possible erroneous early free by Wonsik Kim · 11 years ago
  19. 741a335 Merge "DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel." into klp-dev by Wei Jia · 11 years ago
  20. b659b4c Merge "DO NOT MERGE fix build" into klp-dev by Wonsik Kim · 11 years ago
  21. 9104e70 DO NOT MERGE fix build by Wonsik Kim · 11 years ago
  22. 1784a8d Merge "DO NOT MERGE Avoid size_t overflow in base64 decoding once again" into klp-dev by Wonsik Kim · 11 years ago
  23. 5f2a76f DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel. by Wei Jia · 11 years ago
  24. 278ed11 DO NOT MERGE Avoid size_t overflow in base64 decoding once again by Wonsik Kim · 11 years ago
  25. 69ae6a8 libstagefright: fix A_Refl to return immediately when there is an error. by Wei Jia · 11 years ago
  26. 13ff64c Merge "Zero out return values in media binder calls" into klp-dev by Robert Shih · 11 years ago
  27. ab20313 Merge "Make IEffect command more robust (second try)" into klp-dev by Andy Hung · 11 years ago
  28. 7488842 Merge "Fix timedtext parsing" into klp-dev by Marco Nelissen · 11 years ago
  29. 9d916c7 DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp by Wei Jia · 11 years ago
  30. d260527 Ogg: avoid size_t overflow in base64 decoding by Wonsik Kim · 11 years ago
  31. 8923543 Zero out return values in media binder calls by Robert Shih · 11 years ago
  32. 25a6344 Make IEffect command more robust (second try) by Andy Hung · 11 years ago
  33. d53aced Fix timedtext parsing by Marco Nelissen · 11 years ago
  34. f394f12 Merge "libmedia: clear reply data for IEffect command" into klp-dev by Andy Hung · 11 years ago
  35. 0981df6 IMediaPlayer.cpp: make sure structures are initialized to 0 by Nick Kralevich · 11 years ago
  36. 57bed83 libmedia: clear reply data for IEffect command by Andy Hung · 11 years ago
  37. 9a2be5d Merge "DO NOT MERGE - Fix software video decoder buffer size calculation" into klp-dev by Abhishek Arya · 11 years ago
  38. 0f3e2da DO NOT MERGE - Fix software video decoder buffer size calculation by Marco Nelissen · 11 years ago
  39. a5f50e9 DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data. by Wei Jia · 11 years ago
  40. af7e33f libstagefright: check overflow before memory allocation in OMXCodec.cpp by Wei Jia · 11 years ago
  41. dedaca6 Limit allocations to avoid out-of-memory by Marco Nelissen · 11 years ago
  42. 3b42241 Merge "Prevent integer issues in ID3::Iterator::findFrame" into klp-dev by Robert Shih · 11 years ago
  43. c580c83 Prevent integer issues in ID3::Iterator::findFrame by Joshua J. Drake · 11 years ago
  44. d8816a1 DO NOT MERGE libstagefright: Fix crash in convertMetaDataToMessage by Wei Jia · 11 years ago
  45. 8de6d69 Fix build break DO NOT MERGE by Jeff Tinker · 11 years ago
  46. c2153d0 DO NOT MERGE Part of fix for libmedia OOB write anywhere by Jeff Tinker · 11 years ago
  47. 8a064aa Merge "Fail more gracefully on allocation failure" into klp-dev by Marco Nelissen · 11 years ago
  48. 522019f Merge "libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable." into klp-dev by Wei Jia · 11 years ago
  49. 635d38a Merge "Check RTSP payload length" into klp-dev by Abhishek Arya · 11 years ago
  50. 2c880dd Merge "Sanity check padding/delay values for gapless playback" into klp-dev by Abhishek Arya · 11 years ago
  51. 6ae815e Merge "libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets." into klp-dev by Wei Jia · 11 years ago
  52. 937c6be libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets. by Wei Jia · 11 years ago
  53. b2ae435 libstagefright: fix overflow in pvdec_api.cpp. by Wei Jia · 11 years ago
  54. 4d46f6f Check RTSP payload length by Marco Nelissen · 11 years ago
  55. 108cd2d libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable. by Wei Jia · 11 years ago
  56. 3878b99 Fail more gracefully on allocation failure by Marco Nelissen · 12 years ago
  57. 877c76a Merge "stagefright: check IMemory::pointer() before using the allocation" into klp-dev by Chong Zhang · 11 years ago
  58. ba6093a Sanity check padding/delay values for gapless playback by Marco Nelissen · 11 years ago
  59. f97b6be Merge "Check integer overflow to prevent memory corruption" into klp-dev by Jon Larimer · 11 years ago
  60. 2ed42ae Merge "do not dequeue from native window after we hit fatal error -- DO NOT MERGE" into klp-dev by Jon Larimer · 11 years ago
  61. 0d46c93 Merge "MPEG4Source::fragmentedRead: check range before writing into buffers" into klp-dev by Jon Larimer · 11 years ago
  62. aa1cc74 Merge "Check buffer size before using it" into klp-dev by Jon Larimer · 11 years ago
  63. 6efa86b Merge "Check vector size before accessing" into klp-dev by Abhishek Arya · 11 years ago
  64. 6f561b9 Merge "MatroskaExtractor: detect infinite loop when parsing NALs" into klp-dev by Abhishek Arya · 11 years ago
  65. 407d475 MatroskaExtractor: detect infinite loop when parsing NALs by Robert Shih · 11 years ago
  66. c37f7f6 Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354 by Neel Mehta · 11 years ago
  67. deba061 Merge "Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"" into klp-dev by Abhishek Arya · 11 years ago
  68. 9abb740 Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4 by Abhishek Arya · 11 years ago
  69. 1a09d35 Merge "libstagefright: check remaining data size before parsing it." into klp-dev by Wei Jia · 11 years ago
  70. 12bd1d2 Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4" by Abhishek Arya · 11 years ago
  71. f810a82 MPEG4Source::fragmentedRead: check range before writing into buffers by Robert Shih · 11 years ago
  72. c23e3dd Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4 by Abhishek Arya · 11 years ago
  73. 567b655 Merge "SoftAVCEnc: check requested memory size before allocation." into klp-dev by Wei Jia · 11 years ago
  74. 94c1969 Merge "libstagefright: check memory size for overflow before allocation." into klp-dev by Abhishek Arya · 11 years ago
  75. 8ec845c stagefright: check IMemory::pointer() before using the allocation by Chong Zhang · 11 years ago
  76. 734e65e do not dequeue from native window after we hit fatal error -- DO NOT MERGE by Chong Zhang · 11 years ago
  77. d2ebc0b libstagefright: check remaining data size before parsing it. by Wei Jia · 11 years ago
  78. 3fd9668 SoftAVCEnc: check requested memory size before allocation. by Wei Jia · 11 years ago
  79. 120f259 Merge "ABuffer: reset members when memory allocation fails." into klp-dev by Wei Jia · 11 years ago
  80. fc8c226 Merge "Revert "SoftAVCEnc: check requested memory size before allocation."" into klp-dev by Wei Jia · 11 years ago
  81. 98e68e8 Revert "SoftAVCEnc: check requested memory size before allocation." by Wei Jia · 11 years ago
  82. 74d3170 Merge "Fix comparison sign warnings." into klp-dev by Wei Jia · 11 years ago
  83. b158a9a Check integer overflow to prevent memory corruption by Jeff Tinker · 11 years ago
  84. f11e95b Check buffer size before using it by Marco Nelissen · 11 years ago
  85. 7e9ac35 Fix comparison sign warnings. by Dan Albert · 11 years ago
  86. 7913508 ABuffer: reset members when memory allocation fails. by Wei Jia · 11 years ago
  87. 479b4de SoftAVCEnc: check requested memory size before allocation. by Wei Jia · 11 years ago
  88. 073e4f6 Check vector size before accessing by Marco Nelissen · 11 years ago
  89. b62a73b libstagefright: check memory size for overflow before allocation. by Wei Jia · 11 years ago
  90. 3ce2938 libstagefright: fix possible overflow in amrwbenc. by Wei Jia · 11 years ago
  91. f51115b libstagefright: fix possible overflow in ID3. by Wei Jia · 11 years ago
  92. c86eae3 am 9d9491f9: am 0dbd0d7b: am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  93. 9d9491f am 0dbd0d7b: am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  94. 0dbd0d7 am c9924410: am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  95. c992441 am 2fe61ed0: am 3b8d3fa0: am 186d1fb9: am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  96. 186d1fb am f4dfe12e: am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  97. f4dfe12 am 54d88fe2: am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  98. 54d88fe am aa8dab77: Merge "MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into jb-dev by Nick Kralevich · 11 years ago
  99. f59348e am 0080e03e: am 3ebcce0e: am 2c0f9591: am fea5921b: am 9fff1d37: am d9d35098: am af6b3a6b: am bce77a36: am 0e20b209: MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX by Nick Kralevich · 11 years ago
  100. 0080e03 am 3ebcce0e: am 2c0f9591: am fea5921b: am 9fff1d37: am d9d35098: am af6b3a6b: am bce77a36: am 0e20b209: MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX by Nick Kralevich · 11 years ago