Security Patches :D#2

Open

Megh-Rana wants to merge 18 commits into

CipherOS:elevenfrom

CipherOS-Revived:eleven

Commits on Jun 1, 2023

C2SoftMp3Dec: fix OOB write in output buffer

ManishaJajoo
authored and
Megh-Rana
committed
Fix heap-buffer-overflow in MPEG4Extractor am: d13a4efc7a

AquilesCanta
authored and
Megh-Rana
committed
SimpleDecodingSource:Prevent OOB write in heap mem

Gopalakrishnan Nallasamy
authored and
Megh-Rana
committed
Better buffer-overrun prevention

rbessick4
authored and
Megh-Rana
committed
Safetynet logging for b/204445255

rbessick4
authored and
Megh-Rana
committed
C2AllocatorIon:protect mMappings using mutex

Gopalakrishnan Nallasamy
authored and
Megh-Rana
committed
Safe parsing of HEIF framecount information

rbessick4
authored and
Megh-Rana
committed
Avoid read out of bounds

AquilesCanta
authored and
Megh-Rana
committed
Fix Out of Bounds read in TextDescriptions.cpp

ivanbuper
authored and
Megh-Rana
committed
Cache MMAP client silenced state.

flamme
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE - [Fix vulnerability] setSecurityLevel in clearkey

Edwin Wong
authored and
Megh-Rana
committed
move MediaCodec metrics processing to looper thread

rbessick4
authored and
Megh-Rana
committed

Commits on Jun 12, 2023

Fix NuMediaExtractor::readSampleData buffer Handling

rbessick4
authored and
Megh-Rana
committed

Commits on Oct 9, 2023

Fix Segv on unknown address error flagged by fuzzer test.

Shruti Bihani
authored and
Megh-Rana
committed

Commits on Dec 1, 2023

Fix for heap buffer overflow issue flagged by fuzzer test.

Shruti Bihani
authored and
Megh-Rana
committed
Fix heap-use-after-free issue flagged by fuzzer test.

Shruti Bihani
authored and
Megh-Rana
committed

Commits on Dec 18, 2023

httplive: fix use-after-free

tonihei
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Update uid state based on capability field

atneya
authored and
Megh-Rana
committed