1. 7710e92 Merge "FP2-1575: libstagefright: fix overflow in MPEG4Source::parse" into fp2-dev-v2 by scm · 9 years ago fp2-sibon-2.0.1 fp2-sibon-2.0.2
  2. 062d894 Merge "FP2-1575: do not dequeue from native window after we hit fat" into fp2-dev-v2 by scm · 9 years ago
  3. a37ed51 Merge "FP2-1575: DO NOT MERGE - Fix software video decoder buffer s" into fp2-dev-v2 by scm · 9 years ago
  4. 2e720b4 Merge "FP2-1575: libstagefright: fix overflow in pvdec_api.cpp." into fp2-dev-v2 by scm · 9 years ago
  5. f80059a Merge "FP2-1575: libstagefright: check memory size for overflow bef" into fp2-dev-v2 by scm · 9 years ago
  6. 2746177 Merge "FP2-1575: DO NOT MERGE - SoftwareRenderer: sanity check buff" into fp2-dev-v2 by scm · 9 years ago
  7. cab2c23 Merge "FP2-1575: libstagefright: check overflow before memory alloc" into fp2-dev-v2 by scm · 9 years ago
  8. 87c4bd4 Merge "FP2-1575: Prevent integer issues in ID3::Iterator::findFrame" into fp2-dev-v2 by scm · 9 years ago
  9. f166d11 Merge "FP2-1575: DO NOT MERGE Part of fix for libmedia OOB write an" into fp2-dev-v2 by scm · 9 years ago
  10. f8e32bb Merge "FP2-1575: Check RTSP payload length" into fp2-dev-v2 by scm · 9 years ago
  11. 8a102ce Merge "FP2-1575: libstagefright: Fix crash in convertMetaDataToMess" into fp2-dev-v2 by scm · 9 years ago
  12. 9c7a1cc Merge "FP2-1575: libstagefright: fix handling of mSampleTimeEntries" into fp2-dev-v2 by scm · 9 years ago
  13. 8e94bc8 Merge "FP2-1575: DO NOT MERGE - audio flinger: fix fuzz test crash" into fp2-dev-v2 by scm · 9 years ago
  14. 4d5ceef Merge "FP2-1575: Sanity check padding/delay values for gapless play" into fp2-dev-v2 by scm · 9 years ago
  15. 699f4ad Merge "FP2-1575: SoftAVCEncoder: fix auto merge error, member names" into fp2-dev-v2 by scm · 9 years ago
  16. 76dd082 Merge "FP2-1575: MatroskaExtractor: detect infinite loop when parsi" into fp2-dev-v2 by scm · 9 years ago
  17. 2900598 Merge "FP2-1575: Fix for memory corruption in ID3::removeUnsynchron" into fp2-dev-v2 by scm · 9 years ago
  18. 3d6ac17 Merge "FP2-1575: Fix compile failure after rI431aa2b7d30a942350ab6d" into fp2-dev-v2 by scm · 9 years ago
  19. 000ce06 Merge "FP2-1575: MPEG4Source::fragmentedRead: check range before wr" into fp2-dev-v2 by scm · 9 years ago
  20. 344af89 Merge "FP2-1575: Fix compile after rI431aa2b7d30a942350ab6d105451c6" into fp2-dev-v2 by scm · 9 years ago
  21. e91ac76 Merge "FP2-1575: libstagefright: check remaining data size before p" into fp2-dev-v2 by scm · 9 years ago
  22. bd9427a Merge "FP2-1575: SoftAVCEnc: check requested memory size before all" into fp2-dev-v2 by scm · 9 years ago
  23. 3e8dc42 Merge "FP2-1575: Check integer overflow to prevent memory corruptio" into fp2-dev-v2 by scm · 9 years ago
  24. faf01e4 Merge "FP2-1575: SoftOpus: Fix output buffer capacity." into fp2-dev-v2 by scm · 9 years ago
  25. 14888bc Merge "FP2-1575: Check buffer size before using it" into fp2-dev-v2 by scm · 9 years ago
  26. 7866bf2 Merge "FP2-1575: Fix comparison sign warnings." into fp2-dev-v2 by scm · 9 years ago
  27. 779a095 Merge "FP2-1575: ABuffer: reset members when memory allocation fail" into fp2-dev-v2 by scm · 9 years ago
  28. 211d401 Merge "FP2-1575: Check vector size before accessing" into fp2-dev-v2 by scm · 9 years ago
  29. 33592ab Merge "FP2-1575: libstagefright: fix possible overflow in amrwbenc." into fp2-dev-v2 by scm · 9 years ago
  30. e2d83cf Merge "FP2-1575: libstagefright: fix possible overflow in ID3." into fp2-dev-v2 by scm · 9 years ago
  31. efd953a Merge "FP2-1575: Fix Ogg album art" into fp2-dev-v2 by scm · 9 years ago
  32. 05ac840 Merge "FP2-1575: MPEG4Extractor.cpp: Add check for size == SIZE_MAX" into fp2-dev-v2 by scm · 9 years ago
  33. 834dfd7 Merge "FP2-1575: Extra sanity checks on sample size and resolution" into fp2-dev-v2 by scm · 9 years ago
  34. 424a968 Merge "FP2-1575: Fix crash on malformed id3" into fp2-dev-v2 by scm · 9 years ago
  35. 1c08579 Merge "FP2-1575: SampleTable: fix integer overflow checks." into fp2-dev-v2 by scm · 9 years ago
  36. 1b889bd Merge "FP2-1575: DO NOT MERGE - IAudioFlinger: add checks on binder" into fp2-dev-v2 by scm · 9 years ago
  37. 38dd517 Merge "FP2-1575: MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX" into fp2-dev-v2 by scm · 9 years ago
  38. 21001e5 Merge "FP2-1575: Guard against codecinfo overflow" into fp2-dev-v2 by scm · 9 years ago
  39. af96148 Merge "FP2-1575: audio effects: fix heap overflow" into fp2-dev-v2 by scm · 9 years ago
  40. 303d411 Merge "FP2-1575: Prevent reading past the end of the buffer in 3GPP" into fp2-dev-v2 by scm · 9 years ago
  41. 374ce3f Merge "FP2-1575: Prevent integer underflow if size is below 6" into fp2-dev-v2 by scm · 9 years ago
  42. b3bb747 Merge "FP2-1575: Fix integer overflow when handling MPEG4 tx3g atom" into fp2-dev-v2 by scm · 9 years ago
  43. e47ceae Merge "FP2-1575: Fix integer underflow in covr MPEG4 processing" into fp2-dev-v2 by scm · 9 years ago
  44. 8196518 Merge "FP2-1575: Prevent integer overflow when processing covr MPEG" into fp2-dev-v2 by scm · 9 years ago
  45. 093a55a Merge "FP2-1575: IOMX: Add buffer range check to emptyBuffer" into fp2-dev-v2 by scm · 9 years ago
  46. 6c3a2d9 Merge "FP2-1575: HDCP: buffer over flow check -- DO NOT MERGE" into fp2-dev-v2 by scm · 9 years ago
  47. 519b9e6 Merge "FP2-1575: Add AUtils::isInRange, and use it to detect malfor" into fp2-dev-v2 by scm · 9 years ago
  48. 48abb31 Merge "FP2-1575: Add some sanity checks" into fp2-dev-v2 by scm · 9 years ago
  49. f1d485b Merge "FP2-1575: Fix integer underflow in ESDS processing" into fp2-dev-v2 by scm · 9 years ago
  50. 40e05fb Merge "FP2-1575: Fix integer overflow during MP4 atom processing" into fp2-dev-v2 by scm · 9 years ago
  51. 888b278 Merge "FP2-1575: Fix several ineffective integer overflow checks" into fp2-dev-v2 by scm · 9 years ago
  52. c7a429e Merge "FP2-1575: Revert "FP2-1364: fix aosp vulnerable issues of li" into fp2-dev-v2 by scm · 9 years ago
  53. 04e3d53 Merge "FP2-1575: audio policy service: fix possible memory overflow" into fp2-dev-v2 by scm · 9 years ago
  54. 7c43a1d FP2-1575: libstagefright: fix overflow in MPEG4Source::parse by Wei Jia · 9 years ago
  55. c481a01 FP2-1575: do not dequeue from native window after we hit fat by Chong Zhang · 9 years ago
  56. 797284d FP2-1575: DO NOT MERGE - Fix software video decoder buffer s by Marco Nelissen · 9 years ago
  57. 61be991 FP2-1575: libstagefright: fix overflow in pvdec_api.cpp. by Wei Jia · 9 years ago
  58. 520dcbc FP2-1575: libstagefright: check memory size for overflow bef by Wei Jia · 9 years ago
  59. 2d139c5 FP2-1575: DO NOT MERGE - SoftwareRenderer: sanity check buff by Wei Jia · 9 years ago
  60. 5740cae FP2-1575: libstagefright: check overflow before memory alloc by Wei Jia · 9 years ago
  61. dfb13e4 FP2-1575: Prevent integer issues in ID3::Iterator::findFrame by Joshua J. Drake · 9 years ago
  62. e9f9029 FP2-1575: DO NOT MERGE Part of fix for libmedia OOB write an by Jeff Tinker · 9 years ago
  63. 3c345fe FP2-1575: Check RTSP payload length by Marco Nelissen · 9 years ago
  64. e11ec63 FP2-1575: libstagefright: Fix crash in convertMetaDataToMess by Wei Jia · 9 years ago
  65. ce7ba67 FP2-1575: libstagefright: fix handling of mSampleTimeEntries by Wei Jia · 9 years ago
  66. 0be76e1 FP2-1575: DO NOT MERGE - audio flinger: fix fuzz test crash by Eric Laurent · 9 years ago
  67. b565fc7 FP2-1575: Sanity check padding/delay values for gapless play by Marco Nelissen · 9 years ago
  68. 4bc0916 FP2-1575: SoftAVCEncoder: fix auto merge error, member names by Wei Jia · 9 years ago
  69. 9288ff9 FP2-1575: MatroskaExtractor: detect infinite loop when parsi by Robert Shih · 9 years ago
  70. 85a6b27 FP2-1575: Fix for memory corruption in ID3::removeUnsynchron by Neel Mehta · 9 years ago
  71. 91995e1 FP2-1575: Fix compile failure after rI431aa2b7d30a942350ab6d by Abhishek Arya · 9 years ago
  72. 72f11a3 FP2-1575: MPEG4Source::fragmentedRead: check range before wr by Robert Shih · 9 years ago
  73. 2ccbbb8 FP2-1575: Fix compile after rI431aa2b7d30a942350ab6d105451c6 by Abhishek Arya · 9 years ago
  74. 9af2449 FP2-1575: libstagefright: check remaining data size before p by Wei Jia · 9 years ago
  75. 184f28f FP2-1575: SoftAVCEnc: check requested memory size before all by Wei Jia · 9 years ago
  76. 7b75a70 FP2-1575: Check integer overflow to prevent memory corruptio by Jeff Tinker · 9 years ago
  77. e105854 FP2-1575: SoftOpus: Fix output buffer capacity. by Vignesh Venkatasubramanian · 9 years ago
  78. 334bf51 FP2-1575: Check buffer size before using it by Marco Nelissen · 9 years ago
  79. f8266fd FP2-1575: Fix comparison sign warnings. by Dan Albert · 9 years ago
  80. d77c960 FP2-1575: ABuffer: reset members when memory allocation fail by Wei Jia · 9 years ago
  81. 1ecb6b6 FP2-1575: Check vector size before accessing by Marco Nelissen · 9 years ago
  82. 57884aa FP2-1575: libstagefright: fix possible overflow in amrwbenc. by Wei Jia · 9 years ago
  83. 722adaa FP2-1575: libstagefright: fix possible overflow in ID3. by Wei Jia · 9 years ago
  84. c2559b4 FP2-1575: Fix Ogg album art by Marco Nelissen · 9 years ago
  85. e0e97a8 FP2-1575: MPEG4Extractor.cpp: Add check for size == SIZE_MAX by Nick Kralevich · 9 years ago
  86. 80d9d1e FP2-1575: Extra sanity checks on sample size and resolution by Marco Nelissen · 9 years ago
  87. 552d3ce FP2-1575: Fix crash on malformed id3 by Marco Nelissen · 9 years ago
  88. 9f8f6f2 FP2-1575: SampleTable: fix integer overflow checks. by Wei Jia · 9 years ago
  89. 27b37c1 FP2-1575: DO NOT MERGE - IAudioFlinger: add checks on binder by Eric Laurent · 9 years ago
  90. 4d2103b FP2-1575: MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX by Nick Kralevich · 9 years ago
  91. 3246e31 FP2-1575: Guard against codecinfo overflow by Marco Nelissen · 9 years ago
  92. fcb9017 FP2-1575: audio effects: fix heap overflow by Eric Laurent · 9 years ago
  93. 88b2bad FP2-1575: Prevent reading past the end of the buffer in 3GPP by Joshua J. Drake · 9 years ago
  94. 192e661 FP2-1575: Prevent integer underflow if size is below 6 by Joshua J. Drake · 9 years ago
  95. 818fe96 FP2-1575: Fix integer overflow when handling MPEG4 tx3g atom by Joshua J. Drake · 9 years ago
  96. f25fc01 FP2-1575: Fix integer underflow in covr MPEG4 processing by Joshua J. Drake · 9 years ago
  97. 78367f7 FP2-1575: Prevent integer overflow when processing covr MPEG by Joshua J. Drake · 9 years ago
  98. 067144a FP2-1575: IOMX: Add buffer range check to emptyBuffer by Zach Riggle · 9 years ago
  99. 4fb0586 FP2-1575: HDCP: buffer over flow check -- DO NOT MERGE by Chong Zhang · 9 years ago
  100. 0b09931 FP2-1575: Add AUtils::isInRange, and use it to detect malfor by Lajos Molnar · 9 years ago