*************************************************************** *************************************************************** 24 file changed, 217 insertions(+), 54 deletions(-) *************************************************************** *************************************************************** ========platform/build between android-8.1.0_r9..android-8.1.0_r14========= core/build_id.mk | 2 +- core/version_defaults.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) 07ce56fb2 [DO NOT MERGE] Update security string to 2018-02-05 for oc-mr1-dev bug:70348883 0c3e47ad8 [DO NOT MERGE] Update security string to 2018-02-01 for oc-dev bug:70348883 ========device/huawei/angler-kernel between android-8.1.0_r9..android-8.1.0_r14========= Image.gz-dtb | Bin 11135939 -> 11134528 bytes 1 file changed, 0 insertions(+), 0 deletions(-) b912028 Merge cherrypicks of [3416661, 3417182, 3417738, 3417739, 3417758, 3417360, 3417361, 3417362, 3417363, 3416401, 3416402, 3416403, 3417778, 3417798, 3416662, 3416663, 3417799, 3417800, 3417364] into oc-m5-release ========device/lge/bullhead-kernel between android-8.1.0_r9..android-8.1.0_r14========= Image.gz-dtb | Bin 10826149 -> 10827689 bytes 1 file changed, 0 insertions(+), 0 deletions(-) 8cf33b6 Merge cherrypicks of [3416661, 3417182, 3417738, 3417739, 3417758, 3417360, 3417361, 3417362, 3417363, 3416401, 3416402, 3416403, 3417778, 3417798, 3416662, 3416663, 3417799, 3417800, 3417364] into oc-m5-release ========platform/external/libavc between android-8.1.0_r9..android-8.1.0_r14========= decoder/ih264d_dpb_mgr.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) 04b68a0 Decoder: Modified loop condition while parsing ref_list_reordering. ========platform/external/libhevc between android-8.1.0_r9..android-8.1.0_r14========= decoder/ihevcd_parse_headers.c | 10 +++------- decoder/ihevcd_parse_slice.c | 31 ++++++++++++++++++++++--------- decoder/ihevcd_process_slice.c | 29 ++++++++++++++++++++++------- 3 files changed, 47 insertions(+), 23 deletions(-) 68e532d Check if luma wd and ht are multiple of min cb size a22314d Update ctb pu map for I slice ========platform/external/sonivox between android-8.1.0_r9..android-8.1.0_r14========= arm-wt-22k/lib_src/eas_mdls.c | 5 +++++ arm-wt-22k/lib_src/eas_xmf.c | 13 +++++++++---- 2 files changed, 14 insertions(+), 4 deletions(-) f3decaa Add recursion limit to XMF_ReadNode 33f45ca Fix memory leak ========platform/frameworks/av between android-8.1.0_r9..android-8.1.0_r14========= media/libaudioclient/IAudioPolicyService.cpp | 12 ++++++++++++ media/libaudioclient/include/media/IAudioPolicyService.h | 2 ++ media/libstagefright/codecs/avcenc/SoftAVCEnc.cpp | 6 ++++++ .../codecs/m4v_h263/enc/SoftMPEG4Encoder.cpp | 8 ++++++++ media/libstagefright/codecs/on2/enc/SoftVPXEncoder.cpp | 15 +++++++-------- media/libstagefright/httplive/M3UParser.cpp | 3 +++ media/libstagefright/omx/SoftVideoEncoderOMXComponent.cpp | 13 +++++++++++++ .../media/stagefright/omx/SoftVideoEncoderOMXComponent.h | 2 ++ 8 files changed, 53 insertions(+), 8 deletions(-) 158af2ed6 Apply input buffer validation also to AVC and MPEG4 encoders 28e9a544e httplive: check for malformed EXT-X-STREAM-INF 6a5d1fc7c IAudioPolicyService: Add attribute tags sanitization ========platform/frameworks/base between android-8.1.0_r9..android-8.1.0_r14========= .../locksettings/SyntheticPasswordCrypto.java | 21 +++++++++++++---- .../locksettings/SyntheticPasswordManager.java | 27 +++++++++++++++++----- 2 files changed, 38 insertions(+), 10 deletions(-) 5025791ac6d Swap the order of synthetic password wrapping ========platform/hardware/interfaces between android-8.1.0_r9..android-8.1.0_r14========= cas/1.0/default/DescramblerImpl.cpp | 53 ++++++++++++++++++++++++++++++++++++- 1 file changed, 52 insertions(+), 1 deletion(-) a0b5e8a3 cas: validate shared buffer size before using ========platform/packages/apps/Settings between android-8.1.0_r9..android-8.1.0_r14========= res/values/strings.xml | 2 +- .../src/com/android/settings/bluetooth/BluetoothPairingDialogTest.java | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) 7ed7d00e60 Reword bluetooth confirmation dialog 26e2b2456a Fix BluetoothPairingDialogTest to not expect device name ========platform/system/security between android-8.1.0_r9..android-8.1.0_r14========= keystore/key_store_service.cpp | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) b491600 Fixing bug in security vulnerability patch 80592e6 Fixing security vuln by tightening race condition window.