Merge tag 'android-11.0.0_r38' into staging/lineage-18.1_merge-android-11.0.0_r38
Android 11.0.0 Release 38 (RQ3A.210605.005) * tag 'android-11.0.0_r38': [RESTRICT AUTOMERGE]Fix CryptoPlugin use after free vulnerability. [RESTRICT AUTOMERGE] Fix clearkey CryptoPlugin use after free vulnerability. cameraserver: Enforce system camera rules for setTorchMode and torch callbacks. Modify MediaRecorder stopping process to avoid blocking C2SoftAvcEnc: Use dimensions from mSize instead of input buffer Revert "CCodecConfig: don't dup input format" aaudio: fix race when disconnecting aaudio: lock transport methods [RESTRICT AUTOMERGE] Fix possible uaf of play policy state mediautils : TimeCheck: fix OOB access [RESTRICT AUTOMERGE] Fix UAF in clearkey service's MemoryFileSystem Fix UAF in clearkey service's MemoryFileSystem Fix potential decrypt destPtr overflow. [RESTRICT AUTOMERGE] Fix potential decrypt destPtr overflow. Prevent read of uninitialized memory Prevent read of uninitialized memory Prevent read of uninitialized memory mp3dec: Changes in the fillMainDataBuf function Rephrase to avoid integer overflow Fix possible uaf of play policy state Fix double free of play policy in a race condition. Add a null check in RTSPSource::stop Valid pitch value is required to prevent out of bound access Fix potential decrypt src pointer overflow. mpeg4enc: fix OOB in RasterIntraUpdate Improve handling MediaCodec linkToDeath() resource manager Codec2: Initialize InputSurfaceWrapper::Config structure fields Camera: Fix deadlock in ACameraCaptureSession destructor m4v_h263: Add check on the encode dimension ACodec: Reduce the TWOmxNode wrapper in GraphicBufferSource Conflicts: drm/mediadrm/plugins/clearkey/default/include/DrmPlugin.h Change-Id: I24a4de763f8f91baddc517491313d6ada6514c79
Loading
Please register or sign in to comment