f89f2c65e17c4f6df0845ac099e9197af317283e |
|
22-Jun-2016 |
TreeHugger Robot <treehugger-gerrit@google.com> |
Merge "mm-video-v4l2: venc: add checks before accessing heap pointers" into nyc-dev
|
d99a08f99689df977dfc585a436ada5acf4f2a25 |
|
16-Jun-2016 |
Praveen Chavan <pchavan@codeaurora.org> |
mm-video-v4l2: venc: add checks before accessing heap pointers Heap pointers do not point to user virtual addresses in case of secure session. Set them to NULL and add checks to avoid accesing them Bug: 28815329 Bug: 28920116 Change-Id: I94fd5808e753b58654d65e175d3857ef46ffba26
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
3957953f027b784f2d55d96d388c8107371eb9db |
|
26-May-2016 |
Wonsik Kim <wonsik@google.com> |
Fix wrong nAllocLen Set nAllocLen to the size of the opaque handle itself. Bug: 28816964 Bug: 28816827 Change-Id: Id410e324bee291d4a0018dddb97eda9bbcded099
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
14a9920aa26f6b237957001090b127c9d79ac12e |
|
25-Apr-2016 |
Praveen Chavan <pchavan@codeaurora.org> |
mm-video-v4l2: venc: Avoid processing ETBs/FTBs in invalid states (per the spec) ETB/FTB should not be handled in states other than Executing, Paused and Idle. This avoids accessing invalid buffers. Also add a lock to protect the private-buffers from being deleted while accessing from another thread. Bug: 27903498 Security Vulnerability - Heap Use-After-Free and Possible LPE in MediaServer (libOmxVenc problem #3) Change-Id: I898b42034c0add621d4f9d8e02ca0ed4403d4fd3
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
0db330f0ede890a2c99a73b5c5e53c41a2c87aa3 |
|
30-Apr-2016 |
TreeHugger Robot <treehugger-gerrit@google.com> |
Merge "mm-video-v4l2: vidc: fix matching of extension strings" into nyc-dev
|
f1b15e15b61a610b6d0a78797e9a5a3f2cfdd56c |
|
30-Mar-2016 |
Arun Menon <avmenon@codeaurora.org> |
mm-video-v4l2: vidc: Add support for OMX_IndexConfigAndroidIntraRefresh OMX Component will support OMX_IndexConfigAndroidIntraRefresh only in loaded state. Bug: 27108817 Change-Id: I213fed57842b94c333843871d6c555e1fb8784e5
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
c9770704a9bb7c26205cf0e5bca05d4397aab1c3 |
|
17-Mar-2016 |
Praveen Chavan <pchavan@codeaurora.org> |
mm-video-v4l2: vidc: fix matching of extension strings Using strncmp with the strlen of source string can result in false positives when it is a substring of the passed string. Eg: strncmp("OMX.extn.x", "OMX.extn.xyz", strlen(OMX.extn.x)) will result in a match. Use strcmp instead. Bug: 27344524 Change-Id: I68839f2bea8b97a31f43885538e9dce51aa8c1b4
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
417bd6d3d293ef616a5a33741cfd6ac8c50f685f |
|
21-Mar-2016 |
Praveen Chavan <pchavan@codeaurora.org> |
mm-video-v4l2: venc: add safety checks for freeing buffers Allow only up to 64 buffers on input/output port (since the allocation bitmap is only 64-wide). Add safety checks to free only as many buffers were allocated. Fixes: Heap Overflow and Possible Local Privilege Escalation in MediaServer (libOmxVenc problem) Bug: 27532497 Change-Id: I31e576ef9dc542df73aa6b0ea113d72724b50fc6
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
16ee85d1d456a4b694fd32baa5f52341e638b5d8 |
|
30-Mar-2016 |
Praveen Chavan <pchavan@codeaurora.org> |
mm-video-v4l2: vidc: validate omx param/config data Check the sanity of config/param strcuture objects passed to get/set _ config()/parameter() methods. Bug: 27533317 Security Vulnerability in MediaServer omx_vdec::get_config() Can lead to arbitrary write Change-Id: I6c3243afe12055ab94f1a1ecf758c10e88231809
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
ce256dab580d6601e34cf59642f642bd496952ae |
|
08-Mar-2016 |
Patrick Tjin <pattjin@google.com> |
msm8996: Fix clang build errors Bug: 27420204 Change-Id: I1d0ec866cf244b734897fd39b07551a556c7a0a7 Signed-off-by: Patrick Tjin <pattjin@google.com>
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|
e4010605f233a213cf0d972397bb33c34c364227 |
|
07-Mar-2016 |
Patrick Tjin <pattjin@google.com> |
Initial import of msm8996 media HAL 1) Move existing HAL to msm8974/ 2) Import msm8996 HAL from LA.HB.1.1.2_rb1.12 3) Modify Makefiles to remove kernel dependencies and fix for new directory structure 4) Modify top level makefile for new directory structure Top commits from LA.HB.1.1.2_rb1.12 included in this commit: db7937a mm-video: vidc: memset struct v4l2_format prior to S_FMT d77ab10 Merge "mm-video-v4l2: vidc: Do not queue output buffer if flush is in progress" 8895985 mm-video-v4l2: vidc: vdec: Add property to disable UBWC for OPB 675af75 Merge "mm-video: vidc: Communicate the right colorformat to the driver" dd79df2 Merge "mm-video: vidc: Reliably stop the message thread" c3e8618 Merge "mm-video-v4l2: vidc: venc: Fix B-Frame handling" 755ec08 mm-video-v4l2: vidc: Do not queue output buffer if flush is in progress 3ac8410 mm-video: vidc: Reliably stop the message thread b73dcba Merge "mm-video-v4l2: vidc: venc: Bug fixes for VZIP" 8358109 Merge "mm-video-v4l2: vdec: fix picture type decode mode return status" BUG=27420204 Signed-off-by: Patrick Tjin <pattjin@google.com> Change-Id: I71aa0190e48b332268334677894b0ad7c606296b
/hardware/qcom/media/msm8996/mm-video-v4l2/vidc/venc/src/omx_video_base.cpp
|