1. 8a7ea7b m4v_h263: update width/height only when they are valid. by Wei Jia · 7 years ago
  2. bdad7d8 m4v_h263: check header first before decoding a frame. by Wei Jia · 7 years ago
  3. 636867a Merge "Fix integer overflow in mediadrmserver" into FPIIM_WIP by Franz-Xaver Geiger · 7 years ago
  4. 499ca37 Merge "Fix potential leak" into FPIIM_WIP by Franz-Xaver Geiger · 7 years ago
  5. c178c33 NuPlayerDecoder: fail gracefully when input data can't be held in allocated buffer. by Wei Jia · 9 years ago
  6. 31aff1e Fix integer overflow in mediadrmserver by Jeff Tinker · 7 years ago
  7. 684d1f0 Fix potential leak by Marco Nelissen · 7 years ago
  8. f5f42fe DO NOT MERGE Don't leak `this` out of GraphicBufferSource ctor by Robert Shih · 7 years ago
  9. 7ac5e03 Don't allow using or allocating a buffer after the first state transition by Marco Nelissen · 8 years ago fp2-sibon-17.07.6
  10. 8ef3e3d IOMX: convert ANWB to Gralloc meta if using useBuffer in the same process by Lajos Molnar · 8 years ago
  11. 667ee50 Merge remote-tracking branch 'fp-m/FPIIM_WIP' into review/dirk_vogt/1045 by Borjan Tchakaloff · 7 years ago
  12. 05d708c stagefright: remove allottedSize equality check in IOMX::useBuffer by Lajos Molnar · 8 years ago
  13. 5c6033e IOMX: do not clear buffer if it's allocated by component by Chong Zhang · 8 years ago
  14. dec2fe4 IOMX: allow configuration after going to loaded state by Lajos Molnar · 8 years ago
  15. ee17cdd IOMX: restrict conversion of ANWB to gralloc source in emptyBuffer by Lajos Molnar · 8 years ago
  16. dc9f491 IOMX: work against metadata buffer spoofing by Lajos Molnar · 8 years ago
  17. 726fab8 stagefright: remove allottedSize equality check in IOMX::useBuffer by Lajos Molnar · 8 years ago
  18. cfeb81d IOMX: do not clear buffer if it's allocated by component by Chong Zhang · 8 years ago
  19. f525160 IOMX: allow configuration after going to loaded state by Lajos Molnar · 8 years ago
  20. 657e8cb IOMX: restrict conversion of ANWB to gralloc source in emptyBuffer by Lajos Molnar · 8 years ago
  21. 5c3907e IOMX: work against metadata buffer spoofing by Lajos Molnar · 8 years ago
  22. 2ba7fd2 Fix memory leak in error case by Marco Nelissen · 7 years ago
  23. fdc58ea Limit ogg packet size by Marco Nelissen · 7 years ago
  24. 33142db Prevent OOB write in soft_avc encoder by Ray Essick · 7 years ago
  25. 6f5c56f Avoid crash for stss sync sample number 0 by Roger1 Jonsson · 8 years ago
  26. e864f02 Merge "DO NOT MERGE Fix NPDs in h263 decoder" into FPIIM_WIP by Maarten Derks · 7 years ago
  27. c39ef7a DO NOT MERGE AudioFlinger: Check framecount overflow when creating track by Andy Hung · 8 years ago
  28. d802610 DO NOT MERGE codecs: handle onReset() for a few encoders by Wonsik Kim · 8 years ago
  29. d26ab51 DO NOT MERGE Add bounds check in SoftAACEncoder2::onQueueFilled() by Ray Essick · 8 years ago
  30. 86bc050 DO NOT MERGE Fix NPDs in h263 decoder by Marco Nelissen · 8 years ago
  31. 180d05a DO NOT MERGE Fix out of bounds access by Marco Nelissen · 8 years ago
  32. 0463578 DO NOT MERGE Fix integer overflow and divide-by-zero by Marco Nelissen · 8 years ago
  33. 9410a51 DO NOT MERGE FLACExtractor: copy protect mWriteBuffer by Robert Shih · 8 years ago
  34. 1a2f34e Add bound checks to utf16_to_utf8 by Sergio Giro · 8 years ago
  35. 4cbd56b CameraBase: Don't return an sp<> by reference by Eino-Ville Talvala · 8 years ago
  36. 6a2ef64 Fix overflow check and check read result by Marco Nelissen · 8 years ago
  37. e927584 resolve merge conflicts of 79cf158c51 to mnc-dev by Marco Nelissen · 8 years ago
  38. fc8a293 EffectBundle: check nb channels to write speaker angles by Jean-Michel Trivi · 8 years ago
  39. fc8822c Fix potential uninitialized read by Maarten Derks · 8 years ago
  40. cabeb56 Don't initialize sync sample parameters until the end by Marco Nelissen · 8 years ago
  41. 73a3e2c DO NOT MERGE - improve audio effect framwework thread safety by Eric Laurent · 8 years ago
  42. 70bed29 avc_utils: skip empty NALs from malformed bistreams by Robert Shih · 8 years ago
  43. 0ba8a6f Don't CHECK when buffer is too large by Marco Nelissen · 8 years ago
  44. 659999f Effect: Use local cached data for Effect commit by Andy Hung · 8 years ago
  45. 691333d Fix security vulnerability: potential OOB write in audioserver by rago · 8 years ago
  46. 2dcf6e8 Limit mp4 atom size to something reasonable by Marco Nelissen · 8 years ago
  47. 4cb633d DO NOT MERGE - stagefright: fix integer overflow error by Wonsik Kim · 8 years ago
  48. 7fb3ff4 Impose a size bound for dynamically allocated tables in stbl. by Pawin Vongmasa · 8 years ago
  49. 55a3ff9 Visualizer: Check capture size and latency parameters by Andy Hung · 8 years ago
  50. 8b5d84e Fix security vulnerability: Equalizer command might allow negative indexes by rago · 8 years ago
  51. 563a3d6 DO NOT MERGE: defensive parsing of mp3 album art information by Ray Essick · 8 years ago
  52. 6b1a442 Effects: Check get parameter command size by Andy Hung · 8 years ago
  53. 208d1a3 Make VBRISeeker more robust by Marco Nelissen · 8 years ago
  54. 5f849ef Fix security vulnerability: Effect command might allow negative indexes by rago · 8 years ago
  55. 06cb217 Fix potential NULL dereference in Visualizer effect by rago · 8 years ago
  56. 4763b44 stagefright: don't fail MediaCodec.configure if clients use store-meta key by Lajos Molnar · 8 years ago
  57. 8dbd874 MediaPlayerService: allow next player to be NULL by Wei Jia · 8 years ago
  58. 214a01d DO NOT MERGE Fix divide by zero by Marco Nelissen · 8 years ago
  59. 4b3d737 SampleIterator: clear members on seekTo error by Robert Shih · 8 years ago
  60. 86288b8 Fix stack content leak vulnerability in mediaserver by Jeff Tinker · 8 years ago
  61. d999922 Check mprotect result by Marco Nelissen · 8 years ago
  62. 87950d7 SoundTrigger: get service by value. by Eric Laurent · 8 years ago
  63. 6b91b24 Radio: get service by value. by Eric Laurent · 8 years ago
  64. 13773ff Fix potential overflow in Visualizer effect by rago · 8 years ago
  65. d9da89e Add EFFECT_CMD_SET_PARAM parameter checking by Andy Hung · 8 years ago
  66. dd68a44 better validation lengths of strings in ID3 tags by Ray Essick · 8 years ago
  67. 3c5f311 MediaPlayerService: avoid invalid static cast by Robert Shih · 8 years ago
  68. 73333b8 soundtrigger: add size check on sound model and recogntion data by Eric Laurent · 8 years ago
  69. 4a5947a Fix build breakage caused by commit 940829f69b52d6038db66a9c727534636ecc456d. by Pawin Vongmasa · 8 years ago
  70. edc5f1d SoftMPEG4: Check the buffer size before writing the reference frame. by Pawin Vongmasa · 8 years ago
  71. 5a99f63 fix build by Lajos Molnar · 8 years ago
  72. 0e15cfc SoftVPX: fix nFilledLen overflow by Robert Shih · 8 years ago
  73. d5c3e6c Fix build by Robert Shih · 8 years ago
  74. 5eeb6b2 Fix build by Robert Shih · 8 years ago
  75. 53cac23 omx: prevent input port enable/disable for software codecs by Wonsik Kim · 8 years ago
  76. b6da55f SoftMP3: memset safely by Robert Shih · 8 years ago
  77. f090748 OMXCodec: check IMemory::pointer() before using allocation by Robert Shih · 8 years ago
  78. 6f9680b Fix corruption via buffer overflow in mediaserver by Ray Essick · 8 years ago
  79. 1115e54 DO NOT MERGE stagefright: fix possible stack overflow in AVCC reassemble by Wonsik Kim · 8 years ago
  80. 3b49e9a DO NOT MERGE: Camera: Adjust pointers to ANW buffers to avoid infoleak by Eino-Ville Talvala · 8 years ago
  81. b4522e0 SoftAAC2: fix crash on all-zero adts buffer by Marco Nelissen · 8 years ago
  82. 0b3159d SoftHEVC: Exit gracefully in case of decoder errors by Harish Mahendrakar · 9 years ago
  83. 2fdb512 Check effect command reply size in AudioFlinger by Andy Hung · 8 years ago
  84. fe6d060 DO NOT MERGE omx: check buffer port before using by Wonsik Kim · 8 years ago
  85. 7487150 Don't use sp<>& by Marco Nelissen · 8 years ago
  86. 8f23b3b Fix potential overflow by Marco Nelissen · 8 years ago
  87. 6bce76b Clear unused pointer field when sending across binder by Marco Nelissen · 8 years ago
  88. 7d5d80e Check malloc result to avoid NPD by Marco Nelissen · 8 years ago
  89. 8993fa1 limit mediaserver memory by Marco Nelissen · 8 years ago
  90. 302fe53 Resolve a merge issue between lmp and lmp-mr1+ by Dave Weinstein · 8 years ago
  91. 9dd147b MPEG4Extractor: ensure kKeyTrackID exists before creating an MPEG4Source as track. by Wei Jia · 9 years ago
  92. 6abe87e h264bsdActivateParamSets: Prevent multiplication overflow. by Pawin Vongmasa · 8 years ago
  93. 3f64915 Check section size when verifying CRC by Marco Nelissen · 8 years ago
  94. 8c133e0 Fix security vulnerability in libstagefright by Jeff Tinker · 8 years ago
  95. beaf671 AudioSource: initialize variables by Marco Nelissen · 8 years ago
  96. 99f62a4 SampleTable.cpp: Fixed a regression caused by a fix for bug 28076789. by Pawin Vongmasa · 8 years ago
  97. ff16c29 Resolve merge conflict when cp'ing ag/931301 to mnc-mr1-release by Zach Jang · 8 years ago
  98. 68df452 DO NOT MERGE codecs: check OMX buffer size before use in (vorbis|opus)dec by Wonsik Kim · 9 years ago
  99. 29a8036 codecs: check OMX buffer size before use in (h263|h264)dec by Wonsik Kim · 9 years ago
  100. 9b7e47f codecs: check OMX buffer size before use in (avc|hevc|mpeg2)dec by Wonsik Kim · 9 years ago