summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-26Correctly handle dup() failure in Parcel::readNativeHandleandroid-cts-5.1_r28android-cts-5.1_r27android-cts-5.1_r26android-cts-5.1_r25android-cts-5.1_r24android-cts-5.1_r23android-cts-5.1_r22android-cts-5.1_r21android-cts-5.1_r20android-cts-5.1_r19android-cts-5.1_r18android-cts-5.1_r17android-cts-5.1_r16android-cts-5.1_r15android-cts-5.1_r14android-cts-5.1_r13android-5.1.1_r38lollipop-mr1-releaselollipop-mr1-cts-releaseMarco Nelissen
bail out if dup() fails, instead of creating an invalid native_handle_t Bug: 28395952 Change-Id: Ia1a6198c0f45165b9c6a55a803e5f64d8afa0572
2016-03-25Fix issue #27252896: Security Vulnerability -- weak binderDianne Hackborn
Sending transaction to freed BBinder through weak handle can cause use of a (mostly) freed object. We need to try to safely promote to a strong reference first. Change-Id: Ic9c6940fa824980472e94ed2dfeca52a6b0fd342 (cherry picked from commit c11146106f94e07016e8e26e4f8628f9a0c73199)
2016-03-25BQ: fix some uninitialized variablesPablo Ceballos
Bug 27555981 Bug 27556038 Change-Id: I436b6fec589677d7e36c0e980f6e59808415dc0e
2016-02-26Add SN loggingandroid-cts-5.1_r9android-cts-5.1_r8android-cts-5.1_r7android-cts-5.1_r10android-5.1.1_r37Pablo Ceballos
Bug 27046057 Change-Id: Iede7c92e59e60795df1ec7768ebafd6b090f1c27
2016-02-26Sanity check IMemory access versus underlying mmapChristopher Tate
Bug 26877992 Change-Id: Ibbf4b1061e4675e4e96bc944a865b53eaf6984fe
2016-02-26BQ: Add permission check to BufferQueueConsumer::dumpPablo Ceballos
Bug 27046057 Change-Id: Id7bd8cf95045b497943ea39dde49e877aa6f5c4e
2016-01-22IGraphicBufferProducer: fix QUEUE_BUFFER info leakandroid-5.1.1_r36android-5.1.1_r35Robert Shih
Bug: 26338109 Change-Id: I8a979469bfe1e317ebdefa43685e19f9302baea8
2016-01-22IGraphicBufferConsumer: fix ATTACH_BUFFER info leakRobert Shih
Bug: 26338113 Change-Id: I019c4df2c6adbc944122df96968ddd11a02ebe33
2015-10-27add number constraint for samples per MotionEventandroid-cts-5.1_r6android-5.1.1_r34android-5.1.1_r33android-5.1.1_r30Flanker
Bug:23905002 Signed-off-by: Adam Lesinski <adamlesinski@google.com> (cherry picked from commit 552a8a5d8df32f659b8d11311a244cdc6d3b7733) Change-Id: I9b7ea859889b7697bee4165a2746602212120543
2015-09-28Initialize local variables to avoid data leakandroid-cts-5.1_r5android-cts-5.1_r4android-5.1.1_r26android-5.1.1_r25Naveen Leekha
The uninitialized local variables pick up whatever the memory content was there on stack. This data gets sent to the remote process in case of a failed transaction, which is a security issue. Fixed. (Partial manual merge of master change 12ba0f57d028a9c8f4eb3afddc326b70677d1e0c. Rest to automerge from klp-dev) For b/23696300 Change-Id: I704c9fab327b3545c58e8a9a96ac542eb7469c2a
2015-09-28Initialize local variables to avoid data leakNaveen Leekha
The uninitialized local variables pick up whatever the memory content was there on stack. This data gets sent to the remote process in case of a failed transaction, which is a security issue. Fixed. (Manual merge of master change 12ba0f57d028a9c8f4eb3afddc326b70677d1e0c ) For b/23696300 Change-Id: I665212d10da56f0803b5bb772d14c77e632ba2ab
2015-08-13Disregard alleged binder entities beyond parcel boundsandroid-cts-5.1_r3android-5.1.1_r24android-5.1.1_r20android-5.1.1_r19android-5.1.1_r16android-5.1.1_r15android-5.1.1_r14Christopher Tate
When appending one parcel's contents to another, ignore binder objects within the source Parcel that appear to lie beyond the formal bounds of that Parcel's data buffer. Bug 17312693 Change-Id: If592a260f3fcd9a56fc160e7feb2c8b44c73f514 (cherry picked from commit 27182be9f20f4f5b48316666429f09b9ecc1f22e)
2015-08-13Verify that the native handle was createdAdam Lesinski
The inputs to native_handle_create can cause an overflowed allocation, so check the return value of native_handle_create before accessing the memory it returns. Bug:19334482 Change-Id: I1f489382776c2a1390793a79dc27ea17baa9b2a2 (cherry picked from commit eaac99a7172da52a76ba48c26413778a74951b1a)
2015-02-18Update maxNumber to be smaller.android-cts-5.1_r2android-cts-5.1_r1android-5.1.1_r9android-5.1.1_r6android-5.1.1_r4android-5.1.1_r3android-5.1.1_r2android-5.1.1_r10android-5.1.1_r1android-5.1.0_r5android-5.1.0_r4android-5.1.0_r3android-5.1.0_r1Michael Lentine
There shouldn't be more than 4096 fds (probably signficantly smaller) and there shouldn't be more than 4096 ints. Bug: 18076253 Change-Id: I3a3e50ee3078a4710e9737114e65afc923ed0573
2015-02-11Revert "omx: add Intel's SemiPlanar OMX color format that is used on some ↵Lajos Molnar
devices" This reverts commit 61b17d64f90b85fd367ea1c7609cac69485957d4. Bug: 19317169 Change-Id: Ib1fcc26c46a52c848ffa8238ddbf6abfe57cfa5d
2015-02-09merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2015-02-06DO NOT MERGE: omx: add OMX_INTEL_COLOR_FormatYUV420PackedSemiPlanarLajos Molnar
This seems to have the same layout as OMX_COLOR_FormatYUV420SemiPlanar, but used under this value on some devices. Bug: 19246722 Change-Id: Ib866024e52cf7b12608f02eefc43c6d58a1c0aa1
2015-02-05merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2015-01-30add bUsingNativeBuffers to DescribeColorFormatParamsLajos Molnar
This is needed to find proper color format for flex-YUV native buffer support. Bug: 19179927 Change-Id: I91ae6764e302c4307a0750c1d6820506d735c942
2015-01-29merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2015-01-29Merge "CpuConsumer: lock buffers that could be YUV as ycbcr" into lmp-mr1-devLajos Molnar
2015-01-28CpuConsumer: lock buffers that could be YUV as ycbcrLajos Molnar
Bug: 17906609 Change-Id: Ic71af69ec3b19ab1224ed3ad5e0a97c60e81cda6
2015-01-28GraphicBufferMapper: handle devices that do not implement lock_ycbcrLajos Molnar
Bug: 19179927 Change-Id: I09ffca954fed3cd2d3466c8396627dc7dbc0052d
2015-01-28Remove lock around ref count check in terminate.Michael Lentine
Replace the global lock in terminate for the ref count check with atomics and a local lock. Bug: 19072064 Change-Id: I0cfd6564e227a75b8387a8788b16381d5bc2cc88
2015-01-28Merge "Remove lock around ref count check in terminate." into lmp-mr1-devMichael Lentine
2015-01-28Remove lock around ref count check in terminate.Michael Lentine
Replace the global lock in terminate for the ref count check with atomics and a local lock. Bug: 19072064 Change-Id: I0cfd6564e227a75b8387a8788b16381d5bc2cc88
2015-01-28merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2015-01-27Revert "SurfaceFlinger: Attempt to attribute fds to layers"Dan Stoza
This reverts commit 03eccb6616744c3789b6018680de7bf5a18f71ce. Change-Id: I4f0da7bb62bf77bb3d399aee601beae5e03928fe
2015-01-16SurfaceFlinger: Make log message 64-bit compatibleDan Stoza
Fixes the build on 64-bit targets that complain about using a size_t with a %d in a format string Change-Id: I7dfcd3a49eb0dbc5dffeb82bb7208de7f7925f08
2015-01-16SurfaceFlinger: Attempt to attribute fds to layersDan Stoza
This tracks fds when layers are created and destroyed in an effort to determine which specific app (if any) is active when fds are leaked Bug: 19017008 Change-Id: I1f1d5a9cbc1399e3df3a2d350324f80b3a4e3477
2015-01-16SurfaceFlinger: Make log message 64-bit compatibleDan Stoza
Fixes the build on 64-bit targets that complain about using a size_t with a %d in a format string Change-Id: I7dfcd3a49eb0dbc5dffeb82bb7208de7f7925f08
2015-01-16SurfaceFlinger: Attempt to attribute fds to layersDan Stoza
This tracks fds when layers are created and destroyed in an effort to determine which specific app (if any) is active when fds are leaked Bug: 19017008 Change-Id: I1f1d5a9cbc1399e3df3a2d350324f80b3a4e3477
2015-01-15merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2015-01-14Use the timeout stack dump functions.Christopher Ferris
Use the native stack dumping functions that allows time outs. If debuggerd locks up, before a bugreport would hang forever. Now it will timeout properly and still get all of the other information. Bug: 18766581 Change-Id: I85053b8dcfe6224e2b64b4d8f7f2ef448b3cda34
2015-01-14Fix message when a command times out.Christopher Ferris
The previous version printed out the nanoseconds elapsed, not seconds. Bug: 18766581 (cherry picked from commit 67c5a8af9ed128d8bb56d4723303aef6f0a4500f) Change-Id: Icbaaee83a92767694fd98e3c790f36f4d24681b0
2015-01-12merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2014-12-23OpenMax IL: Added support for E-AC3 codec configuration paramsRachad
Bug: 17883772 Change-Id: Ibf00534607db4bba14c935cf1eaa80eb740297f9
2014-12-22merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2014-12-19Merge "Installd: Swap file for dex2oat" into lmp-mr1-devBrian Carlstrom
2014-12-18Installd: Swap file for dex2oatAndreas Gampe
Add swap file support for dex2oat to installd. Only use in low-memory mode. Bug: 18596910 Change-Id: I131448f3907115054a592af73db86d2b9257ea33
2014-12-11Increase growth limit from 64m to 80m for 1024mb hdpi tabletMathieu Chartier
Prevents apps hitting oome due to old linear alloc objects being allocated in the java heap causing the heap to be larger than it used to be. Bug: 18707227 Change-Id: Ia49a7e6b24ae9fba1961d600d4599c17313b556b
2014-12-11merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2014-12-10Switch to libsigchain.aDmitriy Ivanov
Use LOCAL_WHOLE_STATIC_LIBRARIES to instruct static linker to export symbols from the static library. (cherry picked from commit 4340a14fbfe761a46e7a655b568cbd0953773df3) Bug: 18701723 Change-Id: I70f6fdb64b0d1adbadf96c8de85870a903ec186a
2014-12-04am 784fd39a: resolved conflicts for merge of d6308379 to lmp-devMichael Lentine
* commit '784fd39a19f659e3b464bd9a78361c0adc1cdcab': Fix for corruption when numFds or numInts is too large.
2014-12-04merge in lmp-mr1-release history after reset to lmp-mr1-devThe Android Automerger
2014-12-03Revert "Camera: Add XML entries and files for new system features"Eino-Ville Talvala
This reverts commit e86d1091766b012da1f6616c7ec270d332baef95. Bug: 18281970 Bug: 18573576 Change-Id: If1cf236ef7eabd15ffb2a5dd33d25a8acabdd14c
2014-12-02SurfaceFlinger: Listen to HWC invalidateDan Stoza
"Do less work when using PTS" broke the invalidate path up from HWC to SurfaceFlinger. When HWC would signal an invalidate, SurfaceFinger would wake up, see no new buffers, and go back to sleep. This is fine, except when the invalidate is a result of an HDMI hotplug, in which case the screen remains blank. This change makes that functionality work again. Bug: 18564815 Bug: 18558468 Change-Id: I2e2171d86839945f4e4e6555d66f7e2895bd096a
2014-12-02resolved conflicts for merge of d6308379 to lmp-devMichael Lentine
Change-Id: I92ed61b6fdfe458cf5f8bfd6f0b37ff736280500
2014-12-02am 76ebd319: am 3d89edca: am e6f7a44e: Fix for corruption when numFds or ↵Michael Lentine
numInts is too large. * commit '76ebd319d96494049a2a598f4449c0ec417220f6': Fix for corruption when numFds or numInts is too large.
2014-12-02am 3d89edca: am e6f7a44e: Fix for corruption when numFds or numInts is too ↵Michael Lentine
large. * commit '3d89edca65e07319c9ac3b9bb9889e80e8c40578': Fix for corruption when numFds or numInts is too large.
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-01 05:23:12 +0000