1. 6fdee2a limit mediaserver memory by Marco Nelissen · 9 years ago
  2. e7142a0 Check malloc result to avoid NPD by Marco Nelissen · 9 years ago
  3. e248db0 Fix security vulnerability in libstagefright by Jeff Tinker · 9 years ago
  4. 6054780 h264bsdActivateParamSets: Prevent multiplication overflow. by Pawin Vongmasa · 9 years ago
  5. daef432 Clear unused pointer field when sending across binder by Marco Nelissen · 9 years ago
  6. 4f236c5 Check section size when verifying CRC by Marco Nelissen · 9 years ago
  7. b57b396 SampleTable.cpp: Fixed a regression caused by a fix for bug 28076789. by Pawin Vongmasa · 9 years ago android-6.0.1_r46
  8. 45737cb Resolve merge conflict when cp'ing ag/931301 to mnc-mr1-release by Zach Jang · 9 years ago
  9. 2b6f22d h264dec: check for overflows when calculating allocation size. by Marco Nelissen · 9 years ago
  10. 918eeaa codecs: check OMX buffer size before use in (avc|hevc|mpeg2)dec by Wonsik Kim · 9 years ago
  11. 7cea5cb codecs: check OMX buffer size before use in (gsm|g711)dec by Wonsik Kim · 9 years ago
  12. dd35467 AudioSource: initialize variables by Marco Nelissen · 9 years ago
  13. ad40e57 Check mp3 output buffer size by Marco Nelissen · 9 years ago
  14. d2f4719 codecs: check OMX buffer size before use in (h263|h264)dec by Wonsik Kim · 9 years ago
  15. 4e32001 DO NOT MERGE codecs: check OMX buffer size before use in (vorbis|opus)dec by Wonsik Kim · 9 years ago
  16. db82969 Fix OMX_IndexParamConsumerUsageBits size check by Marco Nelissen · 9 years ago
  17. 0bb5ced Fix size check for OMX_IndexParamConsumerUsageBits by Marco Nelissen · 9 years ago
  18. 94d9e64 Fix initialization of AAC presentation struct by Marco Nelissen · 9 years ago
  19. 295c883 DO NOT MERGE Verify OMX buffer sizes prior to access by Marco Nelissen · 9 years ago
  20. daa85da Fix AMR decoder by Marco Nelissen · 9 years ago android-6.0.1_r40 android-6.0.1_r41 android-6.0.1_r42 android-6.0.1_r43
  21. 65756b4 SoftAMR: check input buffer size to avoid overflow. by Wei Jia · 9 years ago
  22. 44749eb SoftAMR: check output buffer size to avoid overflow. by Wei Jia · 9 years ago
  23. 7fd96eb codecs: check OMX buffer size before use in VP8 encoder. by Wonsik Kim · 9 years ago
  24. a2d1d85 NuPlayerStreamListener: NULL and bounds check before memcpy by Robert Shih · 9 years ago
  25. b04aee8 Camera3Device: Validate template ID by Chien-Yu Chen · 9 years ago
  26. f9ed2fe Add VPX output buffer size check by Marco Nelissen · 9 years ago
  27. de2430f Get service by value instead of reference by Marco Nelissen · 9 years ago android-6.0.1_r30
  28. 582c02e Also fix out of bounds access for normal read by Marco Nelissen · 9 years ago
  29. 3a90a02 Clear allocation to avoid info leak by Marco Nelissen · 9 years ago
  30. 1f76ce4 Fixing safteynet logging bug introduced in ag/862848 by [email protected] · 9 years ago
  31. 57bf497 3 uninitialized variables in IOMX.cpp by [email protected] · 9 years ago
  32. 638e5ba Fix info leak vulnerability of IDrm by Jeff Tinker · 9 years ago
  33. 3ba0bbe IOMX.cpp uninitialized pointer in BnOMX::onTransact by [email protected] · 9 years ago
  34. 38f1da3 Camera: Disallow dumping clients directly by Eino-Ville Talvala · 9 years ago android-6.0.1_r17
  35. d764049 Fix out-of-bounds write by Marco Nelissen · 9 years ago
  36. 3491698 fix possible overflow in effect wrappers. by Eric Laurent · 9 years ago
  37. 1e508ddc merge in mnc-mr1-release history after reset to mnc-dr-dev by The Android Automerger · 9 years ago android-6.0.1_r13
  38. 149c0cb merge in mnc-mr1-release history after reset to mnc-dr-dev by The Android Automerger · 10 years ago android-6.0.1_r10 android-6.0.1_r9
  39. 7b461b5 Fix security vulnerability in ICrypto DO NOT MERGE by Jeff Tinker · 10 years ago android-6.0.1_r11 android-6.0.1_r12
  40. 0681b53 libstagefright: check requested memory size before allocation for SoftMPEG4Encoder and SoftVPXEncoder. by Wei Jia · 10 years ago
  41. 5dc9ffe Reduce lock time for dump to make sure not locked when calling back to IResourceManagerClient. by Ronghua Wu · 10 years ago android-6.0.0_r41 android-6.0.1_r1 android-6.0.1_r3 android-6.0.1_r7 android-6.0.1_r8
  42. 6c7a59a ALooper::awaitResponse gets reply and returns immediately if the looper is stopped. by Ronghua Wu · 10 years ago
  43. 28323c3 GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 am: 313358c747 am: 92b6cd8da9 am: 7b5564e251 am: 000321c7ee by Wei Jia · 10 years ago
  44. fd72a5b GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 am: 313358c747 am: 92b6cd8da9 am: 7b5564e251 by Wei Jia · 10 years ago
  45. d34cf6d Merge "Workaround for busy wait bug" into mnc-dr-dev by Glenn Kasten · 10 years ago
  46. 606fbc1 Workaround for busy wait bug by Glenn Kasten · 10 years ago
  47. 0983d69 Merge "Allow ALooper::awaitResponse to return immediately if the looper is stopped." into mnc-dr-dev by Ronghua Wu · 10 years ago
  48. 0abb2aa Allow ALooper::awaitResponse to return immediately if the looper is stopped. by Ronghua Wu · 10 years ago
  49. 000321c GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 am: 313358c747 am: 92b6cd8da9 by Wei Jia · 10 years ago
  50. 7b5564e GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 am: 313358c747 by Wei Jia · 10 years ago
  51. 92b6cd8 GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 by Wei Jia · 10 years ago
  52. 313358c GenericSource: reset mDecryptHandle when mDataSource is cleared. am: 09c291c838 by Wei Jia · 10 years ago
  53. 09c291c GenericSource: reset mDecryptHandle when mDataSource is cleared. by Wei Jia · 10 years ago
  54. f8dc643 Merge "GenericSource: reset mDecryptHandle when mDataSource is cleared." into mnc-dr-dev by Wei Jia · 10 years ago
  55. 78c164c Merge "Fix offset adjustment when skipping off-spec meta chunk" into mnc-dr-dev by Marco Nelissen · 10 years ago
  56. cdc9cf6 GenericSource: reset mDecryptHandle when mDataSource is cleared. by Wei Jia · 10 years ago
  57. 8ee3685 Fix offset adjustment when skipping off-spec meta chunk by Marco Nelissen · 10 years ago
  58. c0d8c35 Merge "DO NOT MERGE: libcameraservice: Fix nullptr crash when no client." into mnc-dr-dev by Ian Pedowitz · 10 years ago
  59. 5adc76c DO NOT MERGE: libcameraservice: Fix nullptr crash when no client. by Tom Keel · 10 years ago
  60. 301a55c GenericSource: reset mDrmManagerClient when mDataSource is cleared. am: 224858e719 am: 69c8e36da7 am: 3fcddfd23a am: e01ba47052 am: adadada4f0 by Wei Jia · 10 years ago
  61. ddb3d77 GenericSource: reset mDrmManagerClient when mDataSource is cleared. am: 224858e719 am: 69c8e36da7 am: 3fcddfd23a am: e01ba47052 by Wei Jia · 10 years ago
  62. adadada GenericSource: reset mDrmManagerClient when mDataSource is cleared. am: 224858e719 am: 69c8e36da7 am: 3fcddfd23a by Wei Jia · 10 years ago
  63. e01ba47 GenericSource: reset mDrmManagerClient when mDataSource is cleared. am: 224858e719 am: 69c8e36da7 by Wei Jia · 10 years ago
  64. 3fcddfd GenericSource: reset mDrmManagerClient when mDataSource is cleared. am: 224858e719 by Wei Jia · 10 years ago
  65. 69c8e36 GenericSource: reset mDrmManagerClient when mDataSource is cleared. by Wei Jia · 10 years ago
  66. 224858e GenericSource: reset mDrmManagerClient when mDataSource is cleared. by Wei Jia · 10 years ago
  67. 7bfd9af Merge "GenericSource: reset mDrmManagerClient when mDataSource is cleared." into mnc-dr-dev by Wei Jia · 10 years ago
  68. bbe22fe Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d am: 8565726f57 am: b44e95da77 am: 699e9b0749 am: 8e4f53159c am: 8fbf202f7b by Jon Larimer · 10 years ago
  69. e20b0eb Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d am: 8565726f57 am: b44e95da77 am: 699e9b0749 am: 8e4f53159c by Jon Larimer · 10 years ago
  70. 8fbf202 Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d am: 8565726f57 am: b44e95da77 am: 699e9b0749 by Jon Larimer · 10 years ago
  71. 8e4f531 Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d am: 8565726f57 am: b44e95da77 by Jon Larimer · 10 years ago
  72. 699e9b0 Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d am: 8565726f57 by Jon Larimer · 10 years ago
  73. b44e95d Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc am: 781cd4f37d by Jon Larimer · 10 years ago
  74. 8565726 Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev am: b1a13d01dc by Jon Larimer · 10 years ago
  75. 781cd4f Merge "stagefright: MPEG4Extractor: allow \'hdlr\' box before first track" into klp-dev by Jon Larimer · 10 years ago
  76. b1a13d0 Merge "stagefright: MPEG4Extractor: allow 'hdlr' box before first track" into klp-dev by Jon Larimer · 10 years ago
  77. e710ae5 Merge "audio policy: bind setMode() and setPhoneState() operations" into mnc-dev by Christian Bejram · 10 years ago
  78. d3783a4 Merge "AudioPolicyService: fix race in AudioCommandThread" into mnc-dev by Christian Bejram · 10 years ago
  79. 4f16d20 Merge "audio policy: bind setMode() and setPhoneState() operations" into mnc-dev by Christian Bejram · 10 years ago
  80. 81fe612 Merge "AudioPolicyService: fix race in AudioCommandThread" into mnc-dev by Christian Bejram · 10 years ago
  81. b41fd0d GenericSource: reset mDrmManagerClient when mDataSource is cleared. by Wei Jia · 10 years ago
  82. 00a1dca am 32ba6ec7: am 0378676b: am 92990810: am b1231923: am e550d213: am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  83. 32ba6ec am 0378676b: am 92990810: am b1231923: am e550d213: am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  84. 0378676 am 92990810: am b1231923: am e550d213: am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  85. 9299081 am b1231923: am e550d213: am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  86. b123192 am e550d213: am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  87. e550d21 am f70b69a8: Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  88. f70b69a Merge "stagefright: check bounds for MediaCodecList.getCodecInfo" into lmp-dev by Lajos Molnar · 10 years ago
  89. 32ab9fd libcameraservice: Fix ALOG prints in FlashLight. by Ranjith Kagathi Ananda · 10 years ago
  90. 3e60089 Camera: frameworks: Add NULL check for callback by Ranjith Kagathi Ananda · 10 years ago
  91. 9ddf1c7 audio policy: bind setMode() and setPhoneState() operations by Eric Laurent · 10 years ago
  92. 74ce88f AudioPolicyService: fix race in AudioCommandThread by Eric Laurent · 10 years ago
  93. b3d9f56 Reconcile with master after mass cherrypicks by Marco Nelissen · 10 years ago
  94. d538baa Merge "SoftAVCDec: Exit gracefully when memory allocation fails in the decoder" into mnc-dr-dev by Marco Nelissen · 10 years ago
  95. e5d82cb Merge "SoftAVCDec: Added a check for unsupported resolutions" into mnc-dr-dev by Marco Nelissen · 10 years ago
  96. 8383565 SoftAVCDec: Exit gracefully when memory allocation fails in the decoder by Harish Mahendrakar · 10 years ago
  97. b4ec8d0 SoftAVCDec: Added a check for unsupported resolutions by Harish Mahendrakar · 10 years ago
  98. ec62e13 SoftHEVCDec: Reduced memory requirements by Harish Mahendrakar · 10 years ago
  99. a3f2952 SoftMPEG2Dec: Added support for deinterlacer by Harish Mahendrakar · 10 years ago
  100. 0eb5a27 Merge "audio policy: fix transition from VoIP to voice call on USB" into mnc-dr-dev by Eric Laurent · 10 years ago