{"push_id":856795804,"size":18,"distinct_size":18,"ref":"refs/heads/test","head":"8ef40a9d10bcf7d6480b9b38b0ec3f26d675aa6f","before":"252365d34156a21ec97e1e41379eec486432d3a5","commits":[{"sha":"b395e67705b597df4d1a18cbc5fbc39735798ebc","author":{"email":"06267b1dc9b295ad6dc031d6ac2b113a1f6f99bd@google.com","name":"Chong Zhang"},"message":"stagefright: check IMemory::pointer() before using the allocation\n\nbug: 19779574\nChange-Id: I4ffe8c3fadc07da211f421e75ee83010b01d9cbb","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/b395e67705b597df4d1a18cbc5fbc39735798ebc"},{"sha":"0aff2a7482b62dabdd6fa5f6ac2acdbc536e3d94","author":{"email":"a37b918d2e30a509a6a62aec92384cf4377987ae@google.com","name":"Marco Nelissen"},"message":"Fail more gracefully on allocation failure\n\nCheck allocations when the size is read from a file and might therefore\nbe invalid.\n\nb/14388161\n\nChange-Id: Ia08cc0a6107f275a70e793ef3b50c0ce16ceeee0","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/0aff2a7482b62dabdd6fa5f6ac2acdbc536e3d94"},{"sha":"0088ae7e738c15f68c3a0f340eb10fd573d98b61","author":{"email":"9c816bb17b802a3a905259535881a4d1d8ecb0fd@google.com","name":"Andy Hung"},"message":"libmedia: clear reply data for IEffect command\n\nBug: 23540907\nChange-Id: Ib89afc6b273b0eb310bbc5a1bd92b1e3d407c249","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/0088ae7e738c15f68c3a0f340eb10fd573d98b61"},{"sha":"6a16b2426d7e9ecc733a7e113ee1a9a7d421ba86","author":{"email":"e7ef2d30577bd192d036a7f424ec6dd692d415f2@google.com","name":"Nick Kralevich"},"message":"IMediaPlayer.cpp: make sure structures are initialized to 0\n\nCredit https://code.google.com/p/android/issues/detail?id=183310\n\nBug: 23515142\nChange-Id: Idbd66fb148bd0ac1dd78f8651d0164f2a41e2427\n(cherry picked from commit b73b826cc16291b33649402497efbe0f946413bd)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/6a16b2426d7e9ecc733a7e113ee1a9a7d421ba86"},{"sha":"cad7f101a66983be1bfebf22eb82ca3cc2506500","author":{"email":"a37b918d2e30a509a6a62aec92384cf4377987ae@google.com","name":"Marco Nelissen"},"message":"Fix timedtext parsing\n\nAdd bounds checking and fix other bugs.\n\nBug: 23284974\nBug: 23541506\nBug: 23542351\nBug: 23542352\nChange-Id: I53551efdf109ce1833e0c361efaf4cee7a851023","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/cad7f101a66983be1bfebf22eb82ca3cc2506500"},{"sha":"a0ecaeaccab71eb552833b5310867433358c0b99","author":{"email":"9c816bb17b802a3a905259535881a4d1d8ecb0fd@google.com","name":"Andy Hung"},"message":"Make IEffect command more robust (second try)\n\nBug: 23540907\nChange-Id: If30cfa535ad51521053706fc40fc98d893db5bc7\n(cherry picked from commit 10e6660cc5da65b027c90489ba7ac55d1504e012)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/a0ecaeaccab71eb552833b5310867433358c0b99"},{"sha":"80783b7adfe694de50b8a0c6ef128c3c3084caf6","author":{"email":"3ce769fcca9b899e0f55f72e4a3c60028561bd28@google.com","name":"Robert Shih"},"message":"Zero out return values in media binder calls\n\nMore specifically when handling:\n* GET_STREAM_VOLUME in IAudioPolicyService, and\n* GET_CURRENT_POSITION and GET_DURATION in IMediaPlayer\n\nThis prevents leaking uninitialized values across binder in error cases.\n\nBug: 23756261\nChange-Id: I0ffd900ab12b685b0611259ade4a3efb1ec5defe","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/80783b7adfe694de50b8a0c6ef128c3c3084caf6"},{"sha":"99710d5d483acb81202cbccd6f72148e0d74be4b","author":{"email":"3ce769fcca9b899e0f55f72e4a3c60028561bd28@google.com","name":"Robert Shih"},"message":"Zero out return values in audio binder calls\n\nMore specifically when handling GET_OUTPUT_FOR_ATTR in IAudioPolicyService.\nThis prevents leaking a uninitialized `output` across binder if\ngetOutputForAttr were to encounter errors.\n\nBug: 23756261\nChange-Id: Ibff8a1249a4e8a3c89a33a540dda428b10d6ca82","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/99710d5d483acb81202cbccd6f72148e0d74be4b"},{"sha":"ff2d056ae27e1762c42ae5c020477979e6b1b03b","author":{"email":"3b04afaac10fdea85e27b4158b14d11cd7156fb2@google.com","name":"Wonsik Kim"},"message":"Ogg: avoid size_t overflow in base64 decoding\n\nBug: 23707088\nChange-Id: I8d32841fee3213c721cdcc57788807ea64d19d74","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/ff2d056ae27e1762c42ae5c020477979e6b1b03b"},{"sha":"9edf2744bed5ab0badda65b0d0a5a6b8b22554d2","author":{"email":"901052e97499deb567b9ea16af7551e78fd1b42f@google.com","name":"Wei Jia"},"message":"DO NOT MERGE - libstagefright: sanity check size before dereferencing pointer in Utils.cpp\n\nAlso remove some CHECK's.\n\nBug: 23680780\nChange-Id: I62d0941e203e40209fa6fbe3f923f3efdc5a6c23\n(cherry picked from commit 7bb772e0c643ff3292599cf485b9dbf232bf39a4)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/9edf2744bed5ab0badda65b0d0a5a6b8b22554d2"},{"sha":"15d9f57aa4562b62da0e16ff9f2e6cf3c1ce1445","author":{"email":"3ce769fcca9b899e0f55f72e4a3c60028561bd28@google.com","name":"Robert Shih"},"message":"DO NOT MERGE: Protect data source access with mutex during disconnect\n\nBug: 23658148\nChange-Id: Ic37cac7b5d166143e0b77e9919b0aaef486e4fdd\n\nResolved conflicts from cherry-picking ag/764007 into the lmp-mr1-release branch.","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/15d9f57aa4562b62da0e16ff9f2e6cf3c1ce1445"},{"sha":"9945010574224bd730eac51e2ea9c17e778a2fe1","author":{"email":"901052e97499deb567b9ea16af7551e78fd1b42f@google.com","name":"Wei Jia"},"message":"DO NOT MERGE - IAudioFlinger: clear config before reading it from parcel.\n\nBug: 23905951\nBug: 23912202\nChange-Id: Id13a9d3cae2c09e7381b841e67ddfb188274d74c\n(cherry picked from commit e995e477ad59b79145200c8f1e9e13c16c682d59)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/9945010574224bd730eac51e2ea9c17e778a2fe1"},{"sha":"7202c32a3e42fb666caba8f5693d66c8784dbe3c","author":{"email":"3b04afaac10fdea85e27b4158b14d11cd7156fb2@google.com","name":"Wonsik Kim"},"message":"DO NOT MERGE Avoid size_t overflow in base64 decoding once again\n\nSwitch to foundation base64 function in OggExtractor and fix the\nissue there.\n\nThis reverts commit 28314aef9e8a666dbb75bbd555f6566a6c991f1c.\n\nBug: 23707088\nChange-Id: I268bd50431de5b5e579343bf1b425c42ada6daba","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/7202c32a3e42fb666caba8f5693d66c8784dbe3c"},{"sha":"24d59feb83a2b0e2141ed68982a9854a2095ab3e","author":{"email":"83038b3400975ee6205f5756626cc027cbe411bb@google.com","name":"Jeff Tinker"},"message":"Fix for security vulnerability in media server DO NOT MERGE\n\nbug: 23540426\nChange-Id: I7ca419e4008967a0387649e5293ac9d4be71d3c4","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/24d59feb83a2b0e2141ed68982a9854a2095ab3e"},{"sha":"9f5b6184a541461573163520d7f31f0bf943d9fc","author":{"email":"83038b3400975ee6205f5756626cc027cbe411bb@google.com","name":"Jeff Tinker"},"message":"Fix heap data leak vulnerability\n\nbug: 23600291\nChange-Id: I7979e9e25ada01c13775be8580d433a8b4ce4ffe","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/9f5b6184a541461573163520d7f31f0bf943d9fc"},{"sha":"7a92edcc5711ce49580a3e65d6d357c7bf261852","author":{"email":"901052e97499deb567b9ea16af7551e78fd1b42f@google.com","name":"Wei Jia"},"message":"DO NOT MERGE - IAudioFlinger: always initialize variables to ensure no info leak when writing them to Parcel.\n\nBug: 23953967\nChange-Id: Ibbe841da149038675e9e8daea76c77558bc8564b\n(cherry picked from commit 983dca391a76fb45df999fc40e8766b9ddb63511)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/7a92edcc5711ce49580a3e65d6d357c7bf261852"},{"sha":"efc99c3b37f0b2d1a7c93c358f87ac4fdf4a8030","author":{"email":"901052e97499deb567b9ea16af7551e78fd1b42f@google.com","name":"Wei Jia"},"message":"IAudioFlinger: fix the missing initialization of variable to ensure no info leak when writing them to Parcel.\n\nBug: 23953967\nChange-Id: I3a1d0144ba3832649e322c197ff0f03305ee7829\n(cherry picked from commit 4cac44b53cc9f965cc2c9706b1d7ee2cd79f4066)","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/efc99c3b37f0b2d1a7c93c358f87ac4fdf4a8030"},{"sha":"8ef40a9d10bcf7d6480b9b38b0ec3f26d675aa6f","author":{"email":"672d2df060548742c9b53de1776a2ea1684fbe5a@gmail.com","name":"voidz777"},"message":"Merge tag 'android-5.1.1_r29' into test\n\nAndroid 5.1.1 release 29","distinct":true,"url":"https://api.github.com/repos/chroma-K/android_frameworks_av/commits/8ef40a9d10bcf7d6480b9b38b0ec3f26d675aa6f"}]}