)]}'
{
  "log": [
    {
      "commit": "b41a527176b659c5ddfc734838df7607a6af80c9",
      "tree": "97f65bb081c16c90cfa5c6b38571e7102dbb6552",
      "parents": [
        "c41471f6dff4825a27e6e26a0b5b480761572849"
      ],
      "author": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Oct 09 11:52:18 2017 -0700"
      },
      "committer": {
        "name": "Jeff Tinker",
        "email": "jtinker@google.com",
        "time": "Mon Oct 09 21:42:39 2017 -0700"
      },
      "message": "Fix information disclosure in mediadrmserver\n\nTest:poc provided in bug\nbug:62872384\nChange-Id: I3d104a2a64a0cb81e9fd5b04c4def1fbee64da2d\n"
    },
    {
      "commit": "c41471f6dff4825a27e6e26a0b5b480761572849",
      "tree": "c226081ba20c13b644ad89c07035505dbfbb29af",
      "parents": [
        "3e913a793c09ebb20815f08e37aaf03864220429",
        "26a87d15ef97b35633577f7a97ed39bcaa800585"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Wed Oct 04 23:42:01 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Oct 04 23:42:01 2017 +0000"
      },
      "message": "Merge \"m4v_h263: fix global buffer overflow\" into lmp-dev"
    },
    {
      "commit": "3e913a793c09ebb20815f08e37aaf03864220429",
      "tree": "b0cf9da3b509a54cc6a4859156a13333219dde70",
      "parents": [
        "35a587cdc548394a7fcb569815f9f4a65e5ff8a1",
        "12586d1c216c52efbfd2265d240147b1c31fe543"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Sep 13 05:00:01 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Sep 13 05:00:01 2017 +0000"
      },
      "message": "Merge \"Fix memory leaks\" into lmp-dev"
    },
    {
      "commit": "57ad9301e7df892f9235dbe0bb25f80f33a01713",
      "tree": "1322029c5637d0e0c066e7e705da6f3fc442762c",
      "parents": [
        "7b27979c5e3282b696a92cc249075a247899a2cb",
        "cc072c4adefbc4fa9636f975e4cd57ff0697ca9e"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Mon Sep 11 18:40:03 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Sep 11 18:40:03 2017 +0000"
      },
      "message": "Merge \"EffectBundle: Check parameter and value size\" into lmp-dev"
    },
    {
      "commit": "7b27979c5e3282b696a92cc249075a247899a2cb",
      "tree": "f674b19764ca05cd29383d13a8e88ee697f540b4",
      "parents": [
        "996be3eef180deef68804ad2edf98bb3c36027a7",
        "766c91dbf9e222c1ff4f87157321d04e816746e2"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Mon Sep 11 16:35:48 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Sep 11 16:35:48 2017 +0000"
      },
      "message": "Merge \"Track graphic buffer mode in OMXNodeInstance\" into lmp-dev"
    },
    {
      "commit": "26a87d15ef97b35633577f7a97ed39bcaa800585",
      "tree": "2eab9284bacf316b670f9b5b7a2b4d1514da35e8",
      "parents": [
        "0d7d0ab16e9844020f4c9a8f920c218f0820c575"
      ],
      "author": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Thu Sep 07 16:17:05 2017 -0700"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Thu Sep 07 16:17:05 2017 -0700"
      },
      "message": "m4v_h263: fix global buffer overflow\n\nBug: 65025028\nTest: run POC\nChange-Id: Ifa5cf0e3ced7188ed70849b04b57828518ccb5bf\n"
    },
    {
      "commit": "766c91dbf9e222c1ff4f87157321d04e816746e2",
      "tree": "a96639474c42a00559bd3db29dbb3c8c19935df2",
      "parents": [
        "aafbda5a18de2f7f80b7151ddb35f072fdace413"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Wed Aug 30 16:55:26 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Thu Sep 07 22:36:23 2017 +0000"
      },
      "message": "Track graphic buffer mode in OMXNodeInstance\n\nTest: cts-tradefed run cts -p android.media \u0026 YT \u0026 Play Movies \u0026 Cast\nBug: 62948670\nMerged-In: Icbd9b767f1aef005819e680f77f4a05041988f34\nChange-Id: Icbd9b767f1aef005819e680f77f4a05041988f34\n"
    },
    {
      "commit": "12586d1c216c52efbfd2265d240147b1c31fe543",
      "tree": "5fd5b823b83d64f3c1a4d88b8b34d22a466da0c8",
      "parents": [
        "0d7d0ab16e9844020f4c9a8f920c218f0820c575"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Sep 06 15:14:55 2017 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Thu Sep 07 03:37:54 2017 +0000"
      },
      "message": "Fix memory leaks\n\nBug: 64424279\nChange-Id: I814f81d8e050132be7779310d3f1ab6b19f2e593\n"
    },
    {
      "commit": "cc072c4adefbc4fa9636f975e4cd57ff0697ca9e",
      "tree": "8fe87583a092f39f36b842edfb5f59935c39d279",
      "parents": [
        "0d7d0ab16e9844020f4c9a8f920c218f0820c575"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Thu Aug 17 19:00:57 2017 -0700"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue Sep 05 12:24:06 2017 -0700"
      },
      "message": "EffectBundle: Check parameter and value size\n\nTest: POC CTS AudioEffectTest\nBug: 64477217\nBug: 64478003\nMerged-In: Ia5e6ecb5a356daf5f3fa085d1055748f638795d9\nChange-Id: Ia5e6ecb5a356daf5f3fa085d1055748f638795d9\n"
    },
    {
      "commit": "996be3eef180deef68804ad2edf98bb3c36027a7",
      "tree": "7b7d534f33a54c13750cc90eb948558642cec010",
      "parents": [
        "0d7d0ab16e9844020f4c9a8f920c218f0820c575"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Wed Aug 30 14:37:14 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Fri Sep 01 15:15:53 2017 -0700"
      },
      "message": "Block allocateBackup if the node is not secure node.\n\nBug: 63522818\nTest: cts-tradefed run cts -p android.media \u0026 YT \u0026 Play Movies \u0026 Cast\nChange-Id: I2be2748ecabf49d7842a90676e68978bf0c56b71\nMerged-In: I2be2748ecabf49d7842a90676e68978bf0c56b71\n"
    },
    {
      "commit": "0de0b6806a9d75cf3ead908708330b2f1626dc7f",
      "tree": "dfd5e256917a6d6760f6db8a6cbde82ed9308f34",
      "parents": [
        "cddbfe5496633c6627835808003b8fad5876e30e",
        "33508aff52b5131344cac20a5077419920ea046c"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Tue Aug 15 22:05:59 2017 +0000"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Tue Aug 15 22:05:59 2017 +0000"
      },
      "message": "[automerger] Check buffer size in useBuffer in software components am: 4e79910fdb am: 12840141a9 am: 33508aff52\n\nChange-Id: Ic12354524144a6d1337be0a7c57efb4711cee660\n"
    },
    {
      "commit": "33508aff52b5131344cac20a5077419920ea046c",
      "tree": "9d0ca7f3054feb197cb5cced02e42d1699157422",
      "parents": [
        "ab9bfb83b1d36a4767af2ac3115efbba35b8f3e6",
        "12840141a984c6c4cecc0236f9e9082e01ace74d"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Tue Aug 15 22:05:53 2017 +0000"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Tue Aug 15 22:05:53 2017 +0000"
      },
      "message": "[automerger] Check buffer size in useBuffer in software components am: 4e79910fdb am: 12840141a9\n\nChange-Id: Ibbbdacd98e6362267e5f7b926a70c133a0a3d9f4\n"
    },
    {
      "commit": "4e79910fdb303fd28a37a9401bed1b7fbccb1373",
      "tree": "13361c6da538c8623d56ce81f3ad0e3b5137f28b",
      "parents": [
        "5c57e911b4d5c146d03129b4c9d8b02bd5fd736a"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Mon Jul 24 13:59:51 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Tue Aug 15 15:05:01 2017 -0700"
      },
      "message": "Check buffer size in useBuffer in software components\n\nTest: No more crash from oob read/write with running poc.\nBug: 63522430\nChange-Id: I232d256eacdfaa9347902fe9b42650999f0d2d85\n"
    },
    {
      "commit": "cddbfe5496633c6627835808003b8fad5876e30e",
      "tree": "3f2469457ab48db564d4d63d4b58ffc2767d20f0",
      "parents": [
        "da2d2587d3b78dd4b8bf3974d6ad5950f36152c3",
        "5e96386ab7a5391185f6b3ed9ea06f3e23ed253b"
      ],
      "author": {
        "name": "Lajos Molnar",
        "email": "lajos@google.com",
        "time": "Mon Aug 14 23:30:11 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Aug 14 23:30:11 2017 +0000"
      },
      "message": "Merge \"stagefright: avoid buffer overflow in base64 decoder\" into lmp-dev"
    },
    {
      "commit": "ab9bfb83b1d36a4767af2ac3115efbba35b8f3e6",
      "tree": "34c4497469093e6a59f5f42c2a269ba53a697a2e",
      "parents": [
        "03c1ecd9fe43d355db92609ae592fd5c00efad1b",
        "7445f0e4009c357286b69ec2534316facb4db649"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Aug 14 22:22:17 2017 +0000"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Aug 14 22:22:17 2017 +0000"
      },
      "message": "[automerger] MPEG4Source: fix fragmented read. am: 5c57e911b4 am: 7445f0e400\n\nChange-Id: I63d3ee56db210794a06b97f1283bebf978284f42\n"
    },
    {
      "commit": "5c57e911b4d5c146d03129b4c9d8b02bd5fd736a",
      "tree": "c7189f47504b9b74be23f978c6260c7ef9efe004",
      "parents": [
        "804632afcdda6e80945bf27c384757bda50560cb"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Mar 24 14:04:05 2017 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Aug 14 22:22:04 2017 +0000"
      },
      "message": "MPEG4Source: fix fragmented read.\n\nTest: passed CTS test DecoderTest#testDecodeFragmented\nBug: 64314728\nBug: 36571704\nChange-Id: I71ad6aaae473b03483f8405899d3178148597bba\n(cherry picked from commit ba9af7792dfed6e9b1b216aab91a97e713eec891)\n(cherry picked from commit 6b401a337674f2f22b7589534700a33187899869)\n"
    },
    {
      "commit": "c4b06bbc1e6b42cc5b88f57f16135782b58c923d",
      "tree": "ca15163aa11cad9accaf1f9708108f1ab2d3a167",
      "parents": [
        "222dca470e81634b519455a1fb791462d0d9750b",
        "03c1ecd9fe43d355db92609ae592fd5c00efad1b"
      ],
      "author": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Mon Aug 14 19:37:03 2017 +0000"
      },
      "committer": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Mon Aug 14 19:37:03 2017 +0000"
      },
      "message": "[automerger] Add EFFECT_CMD_SET_PARAM parameter checking to Downmix and Reverb am: 804632afcd am: bc1d023cc9 am: 03c1ecd9fe\n\nChange-Id: Iaaaead614bb1a1dbc62f0443e7e3e0d7d4fb9012\n"
    },
    {
      "commit": "03c1ecd9fe43d355db92609ae592fd5c00efad1b",
      "tree": "086c4a70a8aac9aa649ecc5962adf3a7cb1f44b4",
      "parents": [
        "87f1a3041d41737185f9c7425c24d4e56dd1356e",
        "bc1d023cc9f96418a4549f1664b307dce4484f49"
      ],
      "author": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Mon Aug 14 19:36:57 2017 +0000"
      },
      "committer": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Mon Aug 14 19:36:57 2017 +0000"
      },
      "message": "[automerger] Add EFFECT_CMD_SET_PARAM parameter checking to Downmix and Reverb am: 804632afcd am: bc1d023cc9\n\nChange-Id: I8dfe1cdebec08b9ad5d3c7b19b8891158ac51132\n"
    },
    {
      "commit": "5e96386ab7a5391185f6b3ed9ea06f3e23ed253b",
      "tree": "f7a578666093e79138a47b22ce1f1b9852aa4621",
      "parents": [
        "222dca470e81634b519455a1fb791462d0d9750b"
      ],
      "author": {
        "name": "Lajos Molnar",
        "email": "lajos@google.com",
        "time": "Tue Jun 27 13:58:07 2017 -0700"
      },
      "committer": {
        "name": "Lajos Molnar",
        "email": "lajos@google.com",
        "time": "Fri Aug 11 12:52:17 2017 -0700"
      },
      "message": "stagefright: avoid buffer overflow in base64 decoder\n\nBug: 62673128\nChange-Id: Id5f04b772aaca3184879bd5bca453ad9e82c7f94\n"
    },
    {
      "commit": "804632afcdda6e80945bf27c384757bda50560cb",
      "tree": "2daec5cf329096edd4be3595b54cb16c766ba167",
      "parents": [
        "ab2c5046efeafcf819ac04acf864e32dc10a8403"
      ],
      "author": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Mon Jul 24 17:25:47 2017 -0700"
      },
      "committer": {
        "name": "Mikhail Naganov",
        "email": "mnaganov@google.com",
        "time": "Fri Aug 11 18:51:34 2017 +0000"
      },
      "message": "Add EFFECT_CMD_SET_PARAM parameter checking to Downmix and Reverb\n\nBug: 63662938\nBug: 63526567\nTest: Added CTS tests\n\nChange-Id: I8ed398cd62a9f461b0590e37f593daa3d8e4dbc4\n"
    },
    {
      "commit": "222dca470e81634b519455a1fb791462d0d9750b",
      "tree": "d2fc4bb7facb41529ee5d9beb058a38c4e62913a",
      "parents": [
        "6b401a337674f2f22b7589534700a33187899869",
        "87f1a3041d41737185f9c7425c24d4e56dd1356e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Aug 04 22:45:10 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Fri Aug 04 22:45:10 2017 +0000"
      },
      "message": "Merge \"Skip track if verification fails\" into klp-dev am: ab2c5046ef am: f233415199\nam: 87f1a3041d\n\nChange-Id: I8fc2acbf9bbddbc4a401f51595752351c06acc79\n"
    },
    {
      "commit": "87f1a3041d41737185f9c7425c24d4e56dd1356e",
      "tree": "df53196859efa8f93f0cb830ef717b11de14d29d",
      "parents": [
        "5f3ac3898d3d7efe53ad38430694a2a4ca117f85",
        "f233415199cfd8187ce3b2a874869bb17bdf4c80"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Aug 04 22:39:09 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Fri Aug 04 22:39:09 2017 +0000"
      },
      "message": "Merge \"Skip track if verification fails\" into klp-dev am: ab2c5046ef\nam: f233415199\n\nChange-Id: I93a9b7b1f48953ec52d6c0f23e3141ddf6dc30f3\n"
    },
    {
      "commit": "ab2c5046efeafcf819ac04acf864e32dc10a8403",
      "tree": "70b1557d39349b30c6a75e2d60308cf34ecbb2ef",
      "parents": [
        "d371d08bcc6762a522132fb0ba8c0495306a8f24",
        "8082425b96901c0469a81a896d07a69fcb1e9d2f"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Fri Aug 04 22:28:18 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Aug 04 22:28:18 2017 +0000"
      },
      "message": "Merge \"Skip track if verification fails\" into klp-dev"
    },
    {
      "commit": "8082425b96901c0469a81a896d07a69fcb1e9d2f",
      "tree": "8f96c2af16626f7f7834caf1c885c8efb2c15977",
      "parents": [
        "502c2f405355c3253990ac4edae345ac1907f916"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Jul 18 14:57:11 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Fri Aug 04 22:26:12 2017 +0000"
      },
      "message": "Skip track if verification fails\n\nBug: 62187433\nTest: ran poc, CTS\nMerged-In: Ib9b0b6de88d046d8149e9ea5073d6c40ffec7b0c\nChange-Id: Ib9b0b6de88d046d8149e9ea5073d6c40ffec7b0c\n"
    },
    {
      "commit": "6b401a337674f2f22b7589534700a33187899869",
      "tree": "6032428e749cd0886945562a9608a11be6c6beae",
      "parents": [
        "aafbda5a18de2f7f80b7151ddb35f072fdace413"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Mar 24 14:04:05 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Thu Aug 03 18:02:52 2017 +0000"
      },
      "message": "MPEG4Source: fix fragmented read.\n\nTest: passed CTS test DecoderTest#testDecodeFragmented\nBug: 64314728\nBug: 36571704\nChange-Id: I71ad6aaae473b03483f8405899d3178148597bba\n(cherry picked from commit ba9af7792dfed6e9b1b216aab91a97e713eec891)\n"
    },
    {
      "commit": "aafbda5a18de2f7f80b7151ddb35f072fdace413",
      "tree": "39b51bb55f422ad555b0d5676de352d6a1c7693c",
      "parents": [
        "263d5a2a7065ed5a674d2af408f75383d4a01898",
        "5f3ac3898d3d7efe53ad38430694a2a4ca117f85"
      ],
      "author": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Tue Jul 18 22:30:48 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jul 18 22:30:48 2017 +0000"
      },
      "message": "Merge \"stagefright: check aac_frame_length to prevent infinite loop\" into klp-dev am: d371d08bcc am: 98248c3f88\nam: 5f3ac3898d\n\nChange-Id: I22e4c53577164df13e5590d78dbd6796c1db06fe\n"
    },
    {
      "commit": "5f3ac3898d3d7efe53ad38430694a2a4ca117f85",
      "tree": "08c44ba02688d70b94ec6d737077c1cd780de85c",
      "parents": [
        "03fa67202fac9df24f9dbefa24c9f81f9f9e415d",
        "98248c3f88a73bd93580f86c72642bfe9bf2a2db"
      ],
      "author": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Tue Jul 18 22:26:46 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jul 18 22:26:46 2017 +0000"
      },
      "message": "Merge \"stagefright: check aac_frame_length to prevent infinite loop\" into klp-dev am: d371d08bcc\nam: 98248c3f88\n\nChange-Id: I87cf81565eefd8ed299014e7aa1e10a00daefc31\n"
    },
    {
      "commit": "d371d08bcc6762a522132fb0ba8c0495306a8f24",
      "tree": "e7d341307cec0815d693bc9b3d76043410b5f22b",
      "parents": [
        "502c2f405355c3253990ac4edae345ac1907f916",
        "6e2bcf40e4083be3a0fbb13d03293a78301e66ef"
      ],
      "author": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Tue Jul 18 22:14:50 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jul 18 22:14:50 2017 +0000"
      },
      "message": "Merge \"stagefright: check aac_frame_length to prevent infinite loop\" into klp-dev"
    },
    {
      "commit": "263d5a2a7065ed5a674d2af408f75383d4a01898",
      "tree": "f7bcf5319d9b55e4faebe4ac7305bba5fef21d0e",
      "parents": [
        "8700c26a9184224d326a7c3dc018a9f412f6165d",
        "03fa67202fac9df24f9dbefa24c9f81f9f9e415d"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jul 18 19:12:37 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jul 18 19:12:37 2017 +0000"
      },
      "message": "MediaPlayerService: fix access of mPlayer in client am: 502c2f4053 am: bd7db202c6\nam: 03fa67202f\n\nChange-Id: I9336683351fa531560fadbe554eb218fc663585f\n"
    },
    {
      "commit": "03fa67202fac9df24f9dbefa24c9f81f9f9e415d",
      "tree": "578507cd259fa4ae3ef585d7f76cdc348886615a",
      "parents": [
        "5445ddc9837f3632b26be730ec434a54da2d53ef",
        "bd7db202c69ccd28414bcda7bee6f5cae1236885"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jul 18 19:05:35 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jul 18 19:05:35 2017 +0000"
      },
      "message": "MediaPlayerService: fix access of mPlayer in client am: 502c2f4053\nam: bd7db202c6\n\nChange-Id: If691af6c8d3c3849da52da943fd754ed9bd1fe0b\n"
    },
    {
      "commit": "502c2f405355c3253990ac4edae345ac1907f916",
      "tree": "71cb549d0c161a299ad8b3ab4832501963bfbd5b",
      "parents": [
        "da84963c1f4482be7570b68293906e6cc61200bd"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Jul 13 17:47:56 2017 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon Jul 17 23:26:10 2017 +0000"
      },
      "message": "MediaPlayerService: fix access of mPlayer in client\n\nTest: poc doesn\u0027t crash\nBug: 38234812\nChange-Id: I6f9be046ff66d2d5bed27bd712287e4ead550830\n"
    },
    {
      "commit": "5445ddc9837f3632b26be730ec434a54da2d53ef",
      "tree": "3b25ae6bb1db10d33d03b9fa916203842fa396be",
      "parents": [
        "4324bdc8f7a995bf05be8c6db8e9b1528b46c197",
        "b8dfff52eebba2e2e0359a49a8bb23fceb556025"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Jul 14 23:38:32 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Fri Jul 14 23:38:32 2017 +0000"
      },
      "message": "Merge \"DO NOT MERGE : MPEG4Extractor: ensure returned status is checked.\" into klp-dev am: da84963c1f\nam: b8dfff52ee\n\nChange-Id: I3a6b2ea30ba7b97b92eea98d80dd05db42e0dc11\n"
    },
    {
      "commit": "6e2bcf40e4083be3a0fbb13d03293a78301e66ef",
      "tree": "1b1cec1dfa4b56dd9a2a0822a2747bf2618cbaba",
      "parents": [
        "cf39f0e67ab16d96b9b862641194e226d35afb79"
      ],
      "author": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Fri Jul 07 18:25:16 2017 -0700"
      },
      "committer": {
        "name": "Chong Zhang",
        "email": "chz@google.com",
        "time": "Mon Jul 10 10:42:27 2017 -0700"
      },
      "message": "stagefright: check aac_frame_length to prevent infinite loop\n\nbug: 62673179\nChange-Id: I5da44822ad2ff59d396d1df42f34cd0a5620e134\n"
    },
    {
      "commit": "e94149ea039b25af7c2dd3bcedbde4bc176f281c",
      "tree": "2e2d81f958c4cb5256d703034e334d8735a9cc7c",
      "parents": [
        "cf39f0e67ab16d96b9b862641194e226d35afb79"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Feb 14 17:07:24 2017 -0800"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Jun 30 11:56:37 2017 -0700"
      },
      "message": "DO NOT MERGE : MPEG4Extractor: ensure returned status is checked.\n\nAlso fix handling of zero atom size in MPEG4Source::parseChunk.\nIDataSource: ensure readAt returns correct status.\nTest: manually test with mediaplayer.\nBug: 34718515\nChange-Id: I1219ec579aa0876dc1230e36af46b158b84c6d77\n\n(cherry picked from commit ff1fb4d5cdd3b2b28c69edd8cd3021e335ca381a)\n"
    },
    {
      "commit": "808408a89ba25a3d4a9bf1235df5f1aa0b6399ab",
      "tree": "dd3fbfc3a6d065f962f100b3545607331554af65",
      "parents": [
        "abbc9ab00608f0502fbe30384c0b1b612dd59114"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Feb 14 17:07:24 2017 -0800"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri Jun 30 11:03:27 2017 -0700"
      },
      "message": "DO NOT MERGE: MPEG4Extractor: ensure returned status is checked.\n\nAlso fix handling of zero atom size in MPEG4Source::parseChunk.\nIDataSource: ensure readAt returns correct status.\nTest: manually test with mediaplayer.\nBug: 34718515\nChange-Id: I1219ec579aa0876dc1230e36af46b158b84c6d77\n\n(cherry picked from commit ff1fb4d5cdd3b2b28c69edd8cd3021e335ca381a)\n"
    },
    {
      "commit": "6ace94d2952eac82fc4c86aa6d585258248bf18c",
      "tree": "c99c88bcb28d373ee484519362f1fb0ac1ef1eaa",
      "parents": [
        "8818bf1fbb9ea6b65cd61543ed7db986c3d65d13"
      ],
      "author": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Mon Jun 12 12:58:58 2017 -0700"
      },
      "committer": {
        "name": "Dongwon Kang",
        "email": "dwkang@google.com",
        "time": "Mon Jun 12 20:42:18 2017 +0000"
      },
      "message": "MPEG4Extractor: check size for yrrc box\n\nTest: stagefright -s poc_file\nBug: 62133227\nChange-Id: Iafefac39764ce01b4dde414b9f152c9ea71810e9\n"
    },
    {
      "commit": "8818bf1fbb9ea6b65cd61543ed7db986c3d65d13",
      "tree": "c94883f411415c3836f3bfc479e68b4bfa73f217",
      "parents": [
        "1f7d80772cf76eb6373e91039ceb2800ad7af378"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Jan 07 16:03:03 2016 -0800"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Wed Jun 07 17:44:16 2017 +0000"
      },
      "message": "DO NOT MERGE -- NuPlayerDecoder: fail gracefully when input data can\u0027t be held in allocated buffer.\n\nBug: 38391487\nBug: 24145279\nChange-Id: I6b99ee2dc63063557f4ee2c5856f7c848e969752\n(cherry picked from commit 56097a8ecc31ec308a1caa38f92b69f99324eada)\n"
    },
    {
      "commit": "1f7d80772cf76eb6373e91039ceb2800ad7af378",
      "tree": "67fb48ed90aa828fb4330b097ae4d76c96934432",
      "parents": [
        "8cb7994cbfea4aaa7adb5835ec5c91e34229f3e2",
        "966e572c69397616d31f378fe10089ca99373824"
      ],
      "author": {
        "name": "Ricardo Garcia",
        "email": "rago@google.com",
        "time": "Wed Jun 07 13:30:13 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Wed Jun 07 13:30:13 2017 +0000"
      },
      "message": "Merge \"Fix security vulnerability: Equalizer setParameter memory overflow\" into klp-dev am: ef3a4aead0 am: 0ef6d9c121\nam: 966e572c69\n\nChange-Id: Ida849f8cad82a997a108ad472b150c7be29baf42\n"
    },
    {
      "commit": "966e572c69397616d31f378fe10089ca99373824",
      "tree": "5d48a5613fab2bfcc36479ae5a568e8983d3c9bd",
      "parents": [
        "54f81e8fe777b1c63348b4e83e1287386a8263cf",
        "0ef6d9c1216551c6e36e82bb742c964db7ecf808"
      ],
      "author": {
        "name": "Ricardo Garcia",
        "email": "rago@google.com",
        "time": "Wed Jun 07 13:27:12 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Wed Jun 07 13:27:12 2017 +0000"
      },
      "message": "Merge \"Fix security vulnerability: Equalizer setParameter memory overflow\" into klp-dev am: ef3a4aead0\nam: 0ef6d9c121\n\nChange-Id: I420ab9888c2b542ca66fbb65fd2bf7ea7ff3bb16\n"
    },
    {
      "commit": "ef3a4aead0eb4d6b0615159489d4a187ce90de2c",
      "tree": "d7dba055a7c35d6775e24b5984d6675adaae60f6",
      "parents": [
        "d050902155d820e0bbba48ec1a7764b939bdba9c",
        "68b9e0f5d69d3b1e7b7628037696ce32f032e819"
      ],
      "author": {
        "name": "Ricardo Garcia",
        "email": "rago@google.com",
        "time": "Wed Jun 07 13:19:48 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Jun 07 13:19:48 2017 +0000"
      },
      "message": "Merge \"Fix security vulnerability: Equalizer setParameter memory overflow\" into klp-dev"
    },
    {
      "commit": "8cb7994cbfea4aaa7adb5835ec5c91e34229f3e2",
      "tree": "60a05e2eafd149fadbc648a7464fb4189eee022f",
      "parents": [
        "ea83248dfb1822e0c0d507f38b13d90a9641261e",
        "54f81e8fe777b1c63348b4e83e1287386a8263cf"
      ],
      "author": {
        "name": "Pawin Vongmasa",
        "email": "pawin@google.com",
        "time": "Wed Jun 07 05:01:37 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Wed Jun 07 05:01:37 2017 +0000"
      },
      "message": "Merge \"Check the buffer index from acquireBuffer\" into klp-dev am: d050902155 am: 668b7f4b8f\nam: 54f81e8fe7\n\nChange-Id: Ic1ee69858d27b8d695f075bd436faa04795f058f\n"
    },
    {
      "commit": "54f81e8fe777b1c63348b4e83e1287386a8263cf",
      "tree": "70e0e17cf65ca935b650a9fbccbae179ec21f061",
      "parents": [
        "1f44782e928615cc24f627fdd90ff01c04c093eb",
        "668b7f4b8fb26cf25eeda211b89db46744791a95"
      ],
      "author": {
        "name": "Pawin Vongmasa",
        "email": "pawin@google.com",
        "time": "Wed Jun 07 04:59:38 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Wed Jun 07 04:59:38 2017 +0000"
      },
      "message": "Merge \"Check the buffer index from acquireBuffer\" into klp-dev am: d050902155\nam: 668b7f4b8f\n\nChange-Id: I9d59a91f2a63115978bc48087a721cd7e6d8facb\n"
    },
    {
      "commit": "d050902155d820e0bbba48ec1a7764b939bdba9c",
      "tree": "1514e4e7aaee2f5d30c0ed6d9dadf1d4fd202a9a",
      "parents": [
        "f5d6e98996f28ae54df876f3e657058c7c7dae7c",
        "fc609407050deb43ec5f0bc8e234c9896eaccbb4"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Wed Jun 07 04:51:35 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Wed Jun 07 04:51:36 2017 +0000"
      },
      "message": "Merge \"Check the buffer index from acquireBuffer\" into klp-dev"
    },
    {
      "commit": "68b9e0f5d69d3b1e7b7628037696ce32f032e819",
      "tree": "451ab7ee32fcb07da1289e83a62eb3725073fe29",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "rago",
        "email": "rago@google.com",
        "time": "Mon Jun 05 12:15:05 2017 -0700"
      },
      "committer": {
        "name": "rago",
        "email": "rago@google.com",
        "time": "Tue Jun 06 18:05:31 2017 -0700"
      },
      "message": "Fix security vulnerability: Equalizer setParameter memory overflow\n\nBug: 37563371\n\nTest: use POC on bug or cts security test\nChange-Id: I9c9453a222b53fd5ef821330a34cb9e938e4d9c5\n"
    },
    {
      "commit": "ea83248dfb1822e0c0d507f38b13d90a9641261e",
      "tree": "014a4d27c6c770a7682d0b0ed470b8a551598623",
      "parents": [
        "70a63bdf273d17dfabdebb9a1ae3a4607710cf36",
        "1f44782e928615cc24f627fdd90ff01c04c093eb"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue Jun 06 20:58:23 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:58:23 2017 +0000"
      },
      "message": "Merge \"EffectBundle: Check value size for get preset name\" into klp-dev am: f5d6e98996 am: b401a3bf44\nam: 1f44782e92\n\nChange-Id: Idc429c80c4058fcd2232209afd5da70128cca837\n"
    },
    {
      "commit": "1f44782e928615cc24f627fdd90ff01c04c093eb",
      "tree": "b2655249ebb6e4cc3f620c88d97f83f83bb52ef5",
      "parents": [
        "1a419c7b2ac876da8dd304145320baeed4a30575",
        "b401a3bf4468ae629403c32ce6dcc1d7b10d664e"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue Jun 06 20:56:51 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:56:51 2017 +0000"
      },
      "message": "Merge \"EffectBundle: Check value size for get preset name\" into klp-dev am: f5d6e98996\nam: b401a3bf44\n\nChange-Id: Ie62820116b2250c7533975362e90ae8139933697\n"
    },
    {
      "commit": "f5d6e98996f28ae54df876f3e657058c7c7dae7c",
      "tree": "55e72cae66618af6f0df429eb4a1f3f024eb73a1",
      "parents": [
        "021575025c132594e69acac882cdce1f3e0a57ed",
        "fa5c6c97ee86ff038979cedea5c449be4e2b9899"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue Jun 06 20:50:11 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jun 06 20:50:12 2017 +0000"
      },
      "message": "Merge \"EffectBundle: Check value size for get preset name\" into klp-dev"
    },
    {
      "commit": "70a63bdf273d17dfabdebb9a1ae3a4607710cf36",
      "tree": "d661729a77875338de5ef53604f625df24abe1a9",
      "parents": [
        "1173c884db8ab718dc8958974b45d0d19236b75d",
        "1a419c7b2ac876da8dd304145320baeed4a30575"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Tue Jun 06 20:28:12 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:28:12 2017 +0000"
      },
      "message": "Merge \"better manage buffer for libstagefright_soft_mpeg4enc\" into klp-dev am: 021575025c am: 5944b611e5\nam: 1a419c7b2a\n\nChange-Id: Ibb5f76a8dac6cf37d4115d3c277687fa96b08660\n"
    },
    {
      "commit": "1173c884db8ab718dc8958974b45d0d19236b75d",
      "tree": "bb5aada8c8beb1c231be52f7ab7713585845626d",
      "parents": [
        "6aed93d5933e7894be077ab1b078a3f37af9cd07",
        "36eb1039cfa11fb3fb4106aa04d289d1d4f401f7"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jun 06 20:27:45 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:27:45 2017 +0000"
      },
      "message": "Merge \"m4v_h263: update width/height only when they are valid.\" into klp-dev am: 2da03f40eb am: 5e9a9442a3\nam: 36eb1039cf\n\nChange-Id: I62be2937991b3d2d9fdf5c4cd543d669ba2edfab\n"
    },
    {
      "commit": "1a419c7b2ac876da8dd304145320baeed4a30575",
      "tree": "b4a8be06bbccef14fccc03116cca04a1225a9e9d",
      "parents": [
        "36eb1039cfa11fb3fb4106aa04d289d1d4f401f7",
        "5944b611e5f5cbb950de7886f8cf7a0da0f21b9f"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Tue Jun 06 20:21:35 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:21:35 2017 +0000"
      },
      "message": "Merge \"better manage buffer for libstagefright_soft_mpeg4enc\" into klp-dev am: 021575025c\nam: 5944b611e5\n\nChange-Id: I7f5f93f57aa77cb87fdf5155881ed9463e50ef0f\n"
    },
    {
      "commit": "36eb1039cfa11fb3fb4106aa04d289d1d4f401f7",
      "tree": "80357f2653095b60ba375d15079cfee987d29084",
      "parents": [
        "f3383881ffde82b1b50d5a69b488006f289fd8b5",
        "5e9a9442a3506c3d057bfa65338699f51b691b83"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jun 06 20:21:13 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 20:21:13 2017 +0000"
      },
      "message": "Merge \"m4v_h263: update width/height only when they are valid.\" into klp-dev am: 2da03f40eb\nam: 5e9a9442a3\n\nChange-Id: I48abb4d5dfa84f3759dc7990b79a7495562a1376\n"
    },
    {
      "commit": "021575025c132594e69acac882cdce1f3e0a57ed",
      "tree": "54ae2170513c7fc205266e601173fedecca59a95",
      "parents": [
        "2da03f40eb1c8a135c0f64fc572ee0a0869a678e",
        "90d2dd403bc8faa421cfc6b26930e5aa69879943"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Tue Jun 06 20:10:08 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jun 06 20:10:10 2017 +0000"
      },
      "message": "Merge \"better manage buffer for libstagefright_soft_mpeg4enc\" into klp-dev"
    },
    {
      "commit": "2da03f40eb1c8a135c0f64fc572ee0a0869a678e",
      "tree": "1b76752e9bcf166b5e0b4d01214758b8ffa1fb44",
      "parents": [
        "da924b45e19ebe195f0f9a281527bb39b9c667b6",
        "0b5726782d5f9764325057870cef2750853f286a"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Tue Jun 06 20:05:05 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jun 06 20:05:06 2017 +0000"
      },
      "message": "Merge \"m4v_h263: update width/height only when they are valid.\" into klp-dev"
    },
    {
      "commit": "6aed93d5933e7894be077ab1b078a3f37af9cd07",
      "tree": "d88f3ae95495ad788f67a22a63472eaf866b0d75",
      "parents": [
        "486e62c5dd02865c194e599711cf55478c00bceb",
        "38142b60f5144f92d99463fa1d65c543382d1264"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Tue Jun 06 19:52:49 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jun 06 19:52:50 2017 +0000"
      },
      "message": "Merge \"m4v_h263: check header first before decoding a frame.\" into lmp-dev"
    },
    {
      "commit": "f3383881ffde82b1b50d5a69b488006f289fd8b5",
      "tree": "b5bddd4b99e40161aca09411bbb543d3e8f74c44",
      "parents": [
        "fe7c2700aef6c944203f080f21b6761071181c4e",
        "fdfad5899ddc9d0add1b3063cb823dc224488a0a"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jun 06 18:54:07 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Jun 06 18:54:07 2017 +0000"
      },
      "message": "Merge \"DO NOT MERGE - m4v_h263: check header first before decoding a frame.\" into klp-dev am: da924b45e1\nam: fdfad5899d\n\nChange-Id: Ibfeec763c09ce978dd44d7cade7cb848b31aa528\n"
    },
    {
      "commit": "da924b45e19ebe195f0f9a281527bb39b9c667b6",
      "tree": "2911e9aec344421fa5ff8b1951b92f3bfedc6db7",
      "parents": [
        "2f9eacc3ae01d17745f8da6ecc198474ecdb4555",
        "677010098a3451960654be6f7649b38fa14760f3"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Tue Jun 06 18:39:58 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Jun 06 18:39:59 2017 +0000"
      },
      "message": "Merge \"DO NOT MERGE - m4v_h263: check header first before decoding a frame.\" into klp-dev"
    },
    {
      "commit": "90d2dd403bc8faa421cfc6b26930e5aa69879943",
      "tree": "7968bdf14093dcd6751a73fd3f3e22065db6dae7",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Fri Jun 02 13:07:19 2017 -0700"
      },
      "committer": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Fri Jun 02 13:07:19 2017 -0700"
      },
      "message": "better manage buffer for libstagefright_soft_mpeg4enc\n\nExisting code allocated buffer, adjusted pointer to use it, and would\nadjust the pointer back when it came time to free the space. The problem\nwas that the adjustment was based on user-supplied values and if the\nuser changed those values between alloc and free (which was possible),\nthe code ended up free()ing the wrong address.\n\nWe fix this by keeping an extra pointer -- the unmodified allocation --\nwhich we use for the subsequent free() calls. This makes the free()\nindependent of any changes to values that the user provides.\n\nBug: 36075363\nTest: ran poc against patched nyc-mr2-dev tree\nChange-Id: I7013ff5883a945c4647517b2980c76a6558f23d2\n"
    },
    {
      "commit": "cbaad4b189c8566318bdb148cf905fe2b333b8ed",
      "tree": "ea7a11dcd826e218153353ffac6e71858d1baa72",
      "parents": [
        "a2fbd251ca74e2d7ac4f074116eda8a3fb381915",
        "fe7c2700aef6c944203f080f21b6761071181c4e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Jun 02 04:12:32 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Fri Jun 02 04:12:32 2017 +0000"
      },
      "message": "Merge \"Fix potential leak\" into klp-dev am: 2f9eacc3ae am: a7602f8339\nam: fe7c2700ae\n\nChange-Id: I9c4c5dbe0682992f9e7521ed3bf6a52d8311e00f\n"
    },
    {
      "commit": "fe7c2700aef6c944203f080f21b6761071181c4e",
      "tree": "b725e2c01e967c40f1cff0e3ba1d8d56484f7e2c",
      "parents": [
        "55057ab40808d6c5a0b0c16d79c68330b06eafb9",
        "a7602f83394ad3c20f979842fdaa0e3cf39c53f1"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Jun 02 04:09:21 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Fri Jun 02 04:09:21 2017 +0000"
      },
      "message": "Merge \"Fix potential leak\" into klp-dev am: 2f9eacc3ae\nam: a7602f8339\n\nChange-Id: I2883ac8221475d5fa73ed34350f199355b541b14\n"
    },
    {
      "commit": "2f9eacc3ae01d17745f8da6ecc198474ecdb4555",
      "tree": "5a91cde655518aae3a11529df3a332f8d0dce343",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442",
        "e077beb91686c4b7e9d645664da59b7b25bd3978"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Fri Jun 02 04:02:09 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Fri Jun 02 04:02:10 2017 +0000"
      },
      "message": "Merge \"Fix potential leak\" into klp-dev"
    },
    {
      "commit": "38142b60f5144f92d99463fa1d65c543382d1264",
      "tree": "13025af35061e8018b2b8d1c8b39a52bdf07367c",
      "parents": [
        "a2fbd251ca74e2d7ac4f074116eda8a3fb381915"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri May 19 14:34:10 2017 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu Jun 01 18:18:16 2017 -0700"
      },
      "message": "m4v_h263: check header first before decoding a frame.\n\nTest: fix the file in the bug\nBug: 37660827\nChange-Id: I9d6919f96c0c9f29221be1e8e852ecb21062bad9\n(cherry picked from commit db545366c2e893dbbe1a42d858c52067101beda6)\n"
    },
    {
      "commit": "fc609407050deb43ec5f0bc8e234c9896eaccbb4",
      "tree": "c6502a3b97ad0a29bf27a617b722fbda7dddfefe",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "Pawin Vongmasa",
        "email": "pawin@google.com",
        "time": "Mon May 22 18:24:30 2017 -0700"
      },
      "committer": {
        "name": "Pawin Vongmasa",
        "email": "pawin@google.com",
        "time": "Mon May 22 20:12:54 2017 -0700"
      },
      "message": "Check the buffer index from acquireBuffer\n\nTest: Run the POC\nTest: Small CtsMediaTestCases\nBug: 37563942\nMerged-In: I8ddfbc91a08d96de1f732e6776d6f90997042f6b\nChange-Id: I8ddfbc91a08d96de1f732e6776d6f90997042f6b\n"
    },
    {
      "commit": "677010098a3451960654be6f7649b38fa14760f3",
      "tree": "4ebeccc9fa2773528138419076498cfd43c72780",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Fri May 19 14:34:10 2017 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Mon May 22 14:58:11 2017 -0700"
      },
      "message": "DO NOT MERGE - m4v_h263: check header first before decoding a frame.\n\nTest: fix the file in the bug\nBug: 37660827\nChange-Id: I9d6919f96c0c9f29221be1e8e852ecb21062bad9\n"
    },
    {
      "commit": "0b5726782d5f9764325057870cef2750853f286a",
      "tree": "d40565a9fe4af241263423dec164ac9230ba37ca",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu May 18 12:43:12 2017 -0700"
      },
      "committer": {
        "name": "Wei Jia",
        "email": "wjia@google.com",
        "time": "Thu May 18 19:46:56 2017 +0000"
      },
      "message": "m4v_h263: update width/height only when they are valid.\n\nTest: the file in the bug doesn\u0027t crash\nBug: 37079296\nChange-Id: Ie092971dda568119ca38ec67d65ccfc00df93185\n"
    },
    {
      "commit": "fa5c6c97ee86ff038979cedea5c449be4e2b9899",
      "tree": "79f76f898ff2ecbca024fdf71a63935b0f9bab67",
      "parents": [
        "5136b7436f98b53cbca3891e0763584f1c94b442"
      ],
      "author": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue May 16 12:04:50 2017 -0700"
      },
      "committer": {
        "name": "Andy Hung",
        "email": "hunga@google.com",
        "time": "Tue May 16 22:03:24 2017 +0000"
      },
      "message": "EffectBundle: Check value size for get preset name\n\nTest: CTS testAllEffectsEqualizer_CVE_2017_0401\nBug: 37536407\nChange-Id: I347af04677fc49a01efb549f06ff81d1a00dc4d0\n"
    },
    {
      "commit": "a2fbd251ca74e2d7ac4f074116eda8a3fb381915",
      "tree": "e4c94b6f31c5f131fb5b33b11181657873b6badf",
      "parents": [
        "b65b0a8367a8ac29400569c0bde9fc8343dadd69",
        "55057ab40808d6c5a0b0c16d79c68330b06eafb9"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue May 16 15:33:25 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue May 16 15:33:25 2017 +0000"
      },
      "message": "Merge \"Fix memory leak in error case\" into klp-dev am: 5136b7436f am: 60657857c6\nam: 55057ab408\n\nChange-Id: I5107a57def4be19aad9dca950cca06bebecad1e8\n"
    },
    {
      "commit": "55057ab40808d6c5a0b0c16d79c68330b06eafb9",
      "tree": "7c9285e1bc08dbc603eff8b432c952a93d23a94a",
      "parents": [
        "086cee9d89db7f2367f7b403870f3a3324d32fe3",
        "60657857c6249f617c26ac1c80b1f6c05fd0f59e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue May 16 15:30:24 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue May 16 15:30:24 2017 +0000"
      },
      "message": "Merge \"Fix memory leak in error case\" into klp-dev am: 5136b7436f\nam: 60657857c6\n\nChange-Id: I1564d4e2626a31b7018bae301c50a268ccc79749\n"
    },
    {
      "commit": "5136b7436f98b53cbca3891e0763584f1c94b442",
      "tree": "e9d565324b0bf03ad10a7cf23059c1e67e58bfe2",
      "parents": [
        "bf928560aca13c5a615cb3ffc3b6aad16cdf3824",
        "ab34612a31e82b713ca0ac043e14f68f3788fbda"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue May 16 15:20:59 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue May 16 15:21:00 2017 +0000"
      },
      "message": "Merge \"Fix memory leak in error case\" into klp-dev"
    },
    {
      "commit": "b65b0a8367a8ac29400569c0bde9fc8343dadd69",
      "tree": "4cc5aa3f2a5c4715bee94239f3d5f3363ea8cd88",
      "parents": [
        "d12204372f04b80b0ccbf6f02473aef01afaaefc",
        "086cee9d89db7f2367f7b403870f3a3324d32fe3"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon May 15 16:56:55 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon May 15 16:56:55 2017 +0000"
      },
      "message": "Limit ogg packet size am: bf928560ac am: f349435fcf\nam: 086cee9d89\n\nChange-Id: I9687649ed25dade9f872c83a290bbcd0abb4b5fc\n"
    },
    {
      "commit": "086cee9d89db7f2367f7b403870f3a3324d32fe3",
      "tree": "dd8580e2e067154e509bf35e6d0d861e04dd96b4",
      "parents": [
        "59bc7f77f87f0d6f67db4e591f498281881197d5",
        "f349435fcf903bdc7712934b838cb8838363236e"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon May 15 16:53:54 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon May 15 16:53:54 2017 +0000"
      },
      "message": "Limit ogg packet size am: bf928560ac\nam: f349435fcf\n\nChange-Id: I952944295017f01b254c80c8db935e33c51337f3\n"
    },
    {
      "commit": "bf928560aca13c5a615cb3ffc3b6aad16cdf3824",
      "tree": "50656b5c35461513e816499b91d897395bb87860",
      "parents": [
        "922ad6183e1524c06abc4bcc60b8748a45b8bd70"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri May 12 15:35:30 2017 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri May 12 22:38:29 2017 +0000"
      },
      "message": "Limit ogg packet size\n\nA malformed ogg file might lace together a very large packet, which\ncould lead to out of memory conditions. Limit the packet size to\navoid this.\n\nBug: 36592202\nChange-Id: I8650b3ec54a0de9ec302a7cbac296bb85efcfb3d\n"
    },
    {
      "commit": "ab34612a31e82b713ca0ac043e14f68f3788fbda",
      "tree": "e532e184f504d199ce998929de1c4571b51bc2bc",
      "parents": [
        "922ad6183e1524c06abc4bcc60b8748a45b8bd70"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri May 12 10:45:14 2017 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri May 12 10:45:14 2017 -0700"
      },
      "message": "Fix memory leak in error case\n\nBug: 37239013\nChange-Id: Ic33e0f7ed946d0729efa46f69aff1a5d35e81b1e\n"
    },
    {
      "commit": "e077beb91686c4b7e9d645664da59b7b25bd3978",
      "tree": "72154598e1f5204b31974ca862e81c27be768ec1",
      "parents": [
        "922ad6183e1524c06abc4bcc60b8748a45b8bd70"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue May 09 14:17:06 2017 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue May 09 14:17:06 2017 -0700"
      },
      "message": "Fix potential leak\n\nFix potential memory leak introduced with bugfix for bug 31449945.\n\nBug: 36389123\nChange-Id: I5a9a3551692d6cba385b45c4c7a465aa377a62b1\n"
    },
    {
      "commit": "d12204372f04b80b0ccbf6f02473aef01afaaefc",
      "tree": "f187e47fc5290f4a9e22163cbe59b60ce14f5fa5",
      "parents": [
        "82ffcbd6671a96421cdd960eb983319e3b2f1b80",
        "024e783acdff65cdb8eb9de5ade3359ebb338a3b"
      ],
      "author": {
        "name": "TreeHugger Robot",
        "email": "treehugger-gerrit@google.com",
        "time": "Tue Apr 11 17:02:45 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Tue Apr 11 17:02:46 2017 +0000"
      },
      "message": "Merge \"Avoid crash for stss sync sample number 0\" into lmp-dev"
    },
    {
      "commit": "82ffcbd6671a96421cdd960eb983319e3b2f1b80",
      "tree": "32d7d2c01aeeaae03bead8440c01e35e157207ad",
      "parents": [
        "73db408aa39948283227537160fc83fe642086db",
        "59bc7f77f87f0d6f67db4e591f498281881197d5"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Apr 10 20:36:33 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Apr 10 20:36:33 2017 +0000"
      },
      "message": "Merge \"Don\u0027t allow using or allocating a buffer after the first state transition\" into klp-dev am: 922ad6183e am: 0893c50bcf\nam: 59bc7f77f8\n\nChange-Id: I133f8566b649821e06cfb21a95b20f84eb839219\n"
    },
    {
      "commit": "59bc7f77f87f0d6f67db4e591f498281881197d5",
      "tree": "1e5ad8303f68862b6f76120f1915e59fb69c90ba",
      "parents": [
        "ab28d49e4142dc9c37a675fc6fe4eb417d9df887",
        "0893c50bcf38de359aa1007c97629a38dfac767c"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Apr 10 20:32:06 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Apr 10 20:32:06 2017 +0000"
      },
      "message": "Merge \"Don\u0027t allow using or allocating a buffer after the first state transition\" into klp-dev am: 922ad6183e\nam: 0893c50bcf\n\nChange-Id: I819b55a95ff50c51488bac50c43fea8b2244a410\n"
    },
    {
      "commit": "922ad6183e1524c06abc4bcc60b8748a45b8bd70",
      "tree": "9382274447c05302a78d7f65cee4acb73b094a1a",
      "parents": [
        "5c364997a3191cb4e8a288befae87e811a723256",
        "45060d62f6ac2a6661809a1696bd007a64b93e64"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Apr 10 19:57:08 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Apr 10 19:57:08 2017 +0000"
      },
      "message": "Merge \"Don\u0027t allow using or allocating a buffer after the first state transition\" into klp-dev"
    },
    {
      "commit": "024e783acdff65cdb8eb9de5ade3359ebb338a3b",
      "tree": "7d97f01e645825a14ed6c94de4f28295114d6dd7",
      "parents": [
        "73db408aa39948283227537160fc83fe642086db"
      ],
      "author": {
        "name": "Roger1 Jonsson",
        "email": "roger1.jonsson@sonymobile.com",
        "time": "Wed Oct 26 09:20:00 2016 +0200"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Wed Apr 05 16:09:46 2017 -0700"
      },
      "message": "Avoid crash for stss sync sample number 0\n\nA sample number value of 0 means that the value stored in\nthe mSyncSamples array, would become negative (-1),\nwhen converted to index value. This causes a crash.\n\nMake sure that stss sample numbers are bigger\nthan 0 before converting sample number to index value.\n\nBug: 32423862\nbug: 35645051\nTest: Playback video that triggers stss sync sample number 0\nChange-Id: I35bee7c718e01b086d7e05deda13b38083f509f5\n"
    },
    {
      "commit": "ab28d49e4142dc9c37a675fc6fe4eb417d9df887",
      "tree": "ffae05408e6e40ded18db30757ddae2b3f89a17c",
      "parents": [
        "aca26c9d45aeb7d5edd815f97dcc44208a84f4b5",
        "e77a32bd3d57a124a137532241f8dac72e4960aa"
      ],
      "author": {
        "name": "Roger1 Jonsson",
        "email": "roger1.jonsson@sonymobile.com",
        "time": "Wed Apr 05 22:52:35 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Wed Apr 05 22:52:35 2017 +0000"
      },
      "message": "Avoid crash for stss sync sample number 0 am: 5c364997a3\nam: e77a32bd3d\n\nChange-Id: If61ba19bc937c6b7c7227296ddba5a1797072f9d\n"
    },
    {
      "commit": "5c364997a3191cb4e8a288befae87e811a723256",
      "tree": "263b0eade1b86cc767abaa1df6608c6b7509efe6",
      "parents": [
        "13c77f4fe063ad38d90502651ce545e1ed3ba888"
      ],
      "author": {
        "name": "Roger1 Jonsson",
        "email": "roger1.jonsson@sonymobile.com",
        "time": "Wed Oct 26 09:20:00 2016 +0200"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Apr 04 19:40:02 2017 +0000"
      },
      "message": "Avoid crash for stss sync sample number 0\n\nA sample number value of 0 means that the value stored in\nthe mSyncSamples array, would become negative (-1),\nwhen converted to index value. This causes a crash.\n\nMake sure that stss sample numbers are bigger\nthan 0 before converting sample number to index value.\n\nBug: 32423862\nbug: 35645051\nTest: Playback video that triggers stss sync sample number 0\nChange-Id: I35bee7c718e01b086d7e05deda13b38083f509f5\n"
    },
    {
      "commit": "45060d62f6ac2a6661809a1696bd007a64b93e64",
      "tree": "4629768c7a9f06e0005f075a6dc7f09d477ea533",
      "parents": [
        "13c77f4fe063ad38d90502651ce545e1ed3ba888"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 27 15:04:25 2017 -0700"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Tue Mar 28 17:16:49 2017 +0000"
      },
      "message": "Don\u0027t allow using or allocating a buffer after the first state transition\n\nBug: 35467458\nChange-Id: Ia76c8cec8ad2abb95ca29b2a89075f7acab4b174\n"
    },
    {
      "commit": "aca26c9d45aeb7d5edd815f97dcc44208a84f4b5",
      "tree": "2b4ed5077ae0ae583bfbd43ae63056149383f90e",
      "parents": [
        "5b1bfc1f43b1341b462868fdaa8a2d74da5d2714",
        "761abda1bd0dc0d213cc995062eb751b13f639fc"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Tue Mar 14 23:49:57 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Tue Mar 14 23:49:57 2017 +0000"
      },
      "message": "DO NOT MERGE FLACExtractor: copy protect mWriteBuffer am: 13c77f4fe0\nam: 761abda1bd\n\nChange-Id: I30bf5233b69619d260edb952248865adf5c55c83\n"
    },
    {
      "commit": "8ee699977c155c6d67e4abd8b4259b5447148a80",
      "tree": "156a3aa32aef07bed48fab7a34bd7b50c0edd5c5",
      "parents": [
        "8abf11b512f7da119a04edbb152955bc5166e310"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Mon Oct 24 11:38:31 2016 -0700"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Tue Mar 14 21:08:13 2017 +0000"
      },
      "message": "FLACExtractor: copy protect mWriteBuffer\n\nBug: 30895578\nBug: 34970788\nChange-Id: I4cba36bbe3502678210e5925181683df9726b431\n(cherry picked from commit 328cd66cc72ba7bc5452ed5a93f29ddcd73aa9f9)\n"
    },
    {
      "commit": "13c77f4fe063ad38d90502651ce545e1ed3ba888",
      "tree": "360cc8a57e7f9e25c8f682680e7c9ce685de188d",
      "parents": [
        "19b91af75247f5d78bb705541ce4fb56400bd275"
      ],
      "author": {
        "name": "Robert Shih",
        "email": "robertshih@google.com",
        "time": "Mon Oct 24 11:38:31 2016 -0700"
      },
      "committer": {
        "name": "Wonsik Kim",
        "email": "wonsik@google.com",
        "time": "Tue Mar 14 14:04:28 2017 -0700"
      },
      "message": "DO NOT MERGE FLACExtractor: copy protect mWriteBuffer\n\nBug: 30895578\nBug: 34970788\nChange-Id: I4cba36bbe3502678210e5925181683df9726b431\n"
    },
    {
      "commit": "8abf11b512f7da119a04edbb152955bc5166e310",
      "tree": "bae5419d142ac93e7b48f2f6dc623a8d91f0e590",
      "parents": [
        "c3de266a990055c3764c9137a43da99a09d75ccc",
        "5b1bfc1f43b1341b462868fdaa8a2d74da5d2714"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:52:42 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:52:42 2017 +0000"
      },
      "message": "Merge \"Add bounds check in SoftAACEncoder2::onQueueFilled()\" into klp-dev am: 19b91af752 am: 8e3cf4d841\nam: 5b1bfc1f43\n\nChange-Id: I32327162d3e69259656f0b3a82800f45572527fd\n"
    },
    {
      "commit": "c3de266a990055c3764c9137a43da99a09d75ccc",
      "tree": "1dce1384edf6aa1c72539a04fe6f93b12a6ed1fa",
      "parents": [
        "3285770d374e61518df561d1fd269f7bc4516ccd",
        "f5c7784dbd3de07e4e16da74b6c63e219c508d3f"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:52:28 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:52:28 2017 +0000"
      },
      "message": "Merge \"Fix TOCTOU problem in libstagefright_soft_aacenc\" into klp-dev am: 2076915c5f am: dcda2ec2fe\nam: f5c7784dbd\n\nChange-Id: Ic1901b3fa14a1e1c7f582e5b7862e777489e7314\n"
    },
    {
      "commit": "5b1bfc1f43b1341b462868fdaa8a2d74da5d2714",
      "tree": "782ac6869f65b302f29f9e78b99fc75aefef99a9",
      "parents": [
        "f5c7784dbd3de07e4e16da74b6c63e219c508d3f",
        "8e3cf4d841a99c558d9ae3072eb7094cabce14ad"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:48:10 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:48:10 2017 +0000"
      },
      "message": "Merge \"Add bounds check in SoftAACEncoder2::onQueueFilled()\" into klp-dev am: 19b91af752\nam: 8e3cf4d841\n\nChange-Id: I804c61a21202d3c5aef3edac5872f56cef67753b\n"
    },
    {
      "commit": "f5c7784dbd3de07e4e16da74b6c63e219c508d3f",
      "tree": "ce13daa5386d2299d8bb340fbb540839b7a1042b",
      "parents": [
        "c2e69851eac7d9e61c93cda58d8a12792e6262db",
        "dcda2ec2fedf18c6a8cb73077d9927312c37e7cd"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:47:56 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:47:56 2017 +0000"
      },
      "message": "Merge \"Fix TOCTOU problem in libstagefright_soft_aacenc\" into klp-dev am: 2076915c5f\nam: dcda2ec2fe\n\nChange-Id: I6759f0d478dd70baf59c3e006cb904d26793c1d4\n"
    },
    {
      "commit": "3285770d374e61518df561d1fd269f7bc4516ccd",
      "tree": "9be79b2cb8ac68a35f6db0cdc31ee6c1dfe04493",
      "parents": [
        "3c4401fce8dfbd71f9d0caab99192a8ab983a60b",
        "c2e69851eac7d9e61c93cda58d8a12792e6262db"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:43:54 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:43:54 2017 +0000"
      },
      "message": "Merge \"Fix integer overflow and divide-by-zero\" into klp-dev am: b264ece2c0 am: bbca2719c6\nam: c2e69851ea\n\nChange-Id: I2720c4439848f9aab8d7fa4f93b548793d129a4f\n"
    },
    {
      "commit": "3c4401fce8dfbd71f9d0caab99192a8ab983a60b",
      "tree": "9776f0c2adcfb5a616beaefd8f42eef0b66cb47f",
      "parents": [
        "8a3cc1963ee15182c0b9f3b27b1a9e36f3680b0f",
        "9e4a0e1fabe0751bd335e9650c984fd8b361908a"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:43:40 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:43:40 2017 +0000"
      },
      "message": "Merge \"Fix NPDs in h263 decoder\" into klp-dev am: 012e5fd39e am: 9e8dfb5938\nam: 9e4a0e1fab\n\nChange-Id: I17a5c0765c31c92a25e7c89a330aa656adc03baf\n"
    },
    {
      "commit": "8a3cc1963ee15182c0b9f3b27b1a9e36f3680b0f",
      "tree": "b7cbdb96ec0cc8cb7ae3dae9410a499f181db5b7",
      "parents": [
        "9fe1d60957bfbbc03e57b024c72d456941ffc34a",
        "36c2e14da34ad37485404319229594a6577408fd"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:43:26 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:43:26 2017 +0000"
      },
      "message": "Merge \"Fix out of bounds access\" into klp-dev am: 360cbbd72c am: f71b76cae8\nam: 36c2e14da3\n\nChange-Id: Ie6d46a6979bc89e2485fa4d2a25b21fc601e9783\n"
    },
    {
      "commit": "c2e69851eac7d9e61c93cda58d8a12792e6262db",
      "tree": "cefe9fe6cc57e1eb990169bb16a49b09da5b65c0",
      "parents": [
        "9e4a0e1fabe0751bd335e9650c984fd8b361908a",
        "bbca2719c66f7e7776c40a967e5dc6b2f4ba0824"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:39:25 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:39:25 2017 +0000"
      },
      "message": "Merge \"Fix integer overflow and divide-by-zero\" into klp-dev am: b264ece2c0\nam: bbca2719c6\n\nChange-Id: If5ae485e1be0df3d4f61edf689d5b4c1520077b8\n"
    },
    {
      "commit": "9e4a0e1fabe0751bd335e9650c984fd8b361908a",
      "tree": "7acc347093ddd2284c20dd432cf6853e7b3be26d",
      "parents": [
        "36c2e14da34ad37485404319229594a6577408fd",
        "9e8dfb59380585a771620eee5e0732aef63daa11"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:39:10 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:39:10 2017 +0000"
      },
      "message": "Merge \"Fix NPDs in h263 decoder\" into klp-dev am: 012e5fd39e\nam: 9e8dfb5938\n\nChange-Id: I875cb7bba1bc6f6f443923a04629ae44a9d41140\n"
    },
    {
      "commit": "36c2e14da34ad37485404319229594a6577408fd",
      "tree": "4f6957189239cf6ae64ae00b0df86ae9dff9c51f",
      "parents": [
        "de6072164a8d2bca2cd404741a121344a3e8bc33",
        "f71b76cae8f42cdd63608264b9211102368fb9a3"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:38:56 2017 +0000"
      },
      "committer": {
        "name": "android-build-merger",
        "email": "android-build-merger@google.com",
        "time": "Mon Mar 13 22:38:56 2017 +0000"
      },
      "message": "Merge \"Fix out of bounds access\" into klp-dev am: 360cbbd72c\nam: f71b76cae8\n\nChange-Id: I3306be5d7bb3867287732757dd14170527488b68\n"
    },
    {
      "commit": "19b91af75247f5d78bb705541ce4fb56400bd275",
      "tree": "e1921084716176e841cf7dc15d7ea82f1f69dd17",
      "parents": [
        "2076915c5f16f9f1a036cb70eb5d708f77fd8ff2",
        "6231243626b8b9c57593b1f0ee417f2c4af4c0aa"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:38:40 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Mar 13 22:38:40 2017 +0000"
      },
      "message": "Merge \"Add bounds check in SoftAACEncoder2::onQueueFilled()\" into klp-dev"
    },
    {
      "commit": "2076915c5f16f9f1a036cb70eb5d708f77fd8ff2",
      "tree": "3ee9b17a95fdadf1b883c0abe895a3d560a005e2",
      "parents": [
        "b264ece2c02b97226a28df55dfe80ea0593421e3",
        "0495c029bd51bcfc1cca8c943ab4ce2f201dbe98"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 22:35:43 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Mar 13 22:35:43 2017 +0000"
      },
      "message": "Merge \"Fix TOCTOU problem in libstagefright_soft_aacenc\" into klp-dev"
    },
    {
      "commit": "b264ece2c02b97226a28df55dfe80ea0593421e3",
      "tree": "b413372d709392ea10254ca9c3430ed4a97db3cd",
      "parents": [
        "012e5fd39e36f69c11fbfaba3c801685895b1747",
        "8538a603ef992e75f29336499cb783f3ec19f18c"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:31:24 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Mar 13 22:31:25 2017 +0000"
      },
      "message": "Merge \"Fix integer overflow and divide-by-zero\" into klp-dev"
    },
    {
      "commit": "012e5fd39e36f69c11fbfaba3c801685895b1747",
      "tree": "9669ff23a7fbe6f8c903e863dfee55ea9b28de15",
      "parents": [
        "360cbbd72c4448fc7125a8f0f7a87d28ba41152d",
        "2ad2a92318a3b9daf78ebcdc597085adbf32600d"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 22:30:25 2017 +0000"
      },
      "committer": {
        "name": "Android (Google) Code Review",
        "email": "android-gerrit@google.com",
        "time": "Mon Mar 13 22:30:25 2017 +0000"
      },
      "message": "Merge \"Fix NPDs in h263 decoder\" into klp-dev"
    },
    {
      "commit": "6231243626b8b9c57593b1f0ee417f2c4af4c0aa",
      "tree": "35fa83242e3770be830339d8165faa004fea1d94",
      "parents": [
        "0495c029bd51bcfc1cca8c943ab4ce2f201dbe98"
      ],
      "author": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 11:59:57 2017 -0700"
      },
      "committer": {
        "name": "Ray Essick",
        "email": "essick@google.com",
        "time": "Mon Mar 13 11:59:57 2017 -0700"
      },
      "message": "Add bounds check in SoftAACEncoder2::onQueueFilled()\n\nOriginal code blindly copied some header information into the\nuser-supplied buffer without checking for sufficient space.\nThe code does check when it gets to filling the data -- it\u0027s\njust the header copies that weren\u0027t checked.\n\nBug: 34617444\nTest: ran POC before/after\nChange-Id: I6e80ec90616f6cd02bb8316cd2d6e309b7e4729d\n"
    },
    {
      "commit": "2ad2a92318a3b9daf78ebcdc597085adbf32600d",
      "tree": "5b65ae5338ec0b38d27b249517384e1264ce636a",
      "parents": [
        "e0da30dc577a6c36d66345d00c47045a3d2f6490"
      ],
      "author": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Fri Mar 03 13:37:27 2017 -0800"
      },
      "committer": {
        "name": "Marco Nelissen",
        "email": "marcone@google.com",
        "time": "Mon Mar 13 16:04:33 2017 +0000"
      },
      "message": "Fix NPDs in h263 decoder\n\nBug: 35269635\nTest: decoded PoC with and without patch\nChange-Id: I636a14360c7801cc5bca63c9cb44d1d235df8fd8\n"
    }
  ],
  "next": "0495c029bd51bcfc1cca8c943ab4ce2f201dbe98"
}