android-5.1.1_r18 to android-5.1.1_r23 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ, and further improved by Al Sutton.

Please do not copy this without attribution to Android Police, Al Sutton, and JBQ for the original script.

+- Project: platform/build

bd2ac50 : "LVY48H"
8e9b8d2 : LVY48G

+- Project: platform/cts

bf0aad4 : test if libFLAC is patched against CVE-2014-9028
e4f1a59 : CTS: check non-zygote apps are not debuggable

+- Project: platform/dalvik

71eabef : Ensure deterministic multidex partitioning

+- Project: platform/external/flac

f9a86d0 : Add macro definitions for clang/llvm.
5fd657a : libFLAC: merge master from Xiph

+- Project: platform/external/libhevc

5be3540 : Align pic_width_in_luma_samples and pic_width_in_luma_samples to 8

+- Project: platform/external/libvpx

2f49716 : Try to CP ag/749963 from klp-dev into lmp-mr1-release

+- Project: platform/external/skia

2adfe26 : SkScaledBitmapSampler: fix memory overwritten

+- Project: platform/external/sonivox

cb21414 : Sonivox: check loopStart/loopLength against one specific wave, not whole wave pool.
584ecd1 : Sonivox: fix overflow in Parse_data in eas_mdls.c
e311210 : Sonivox: make sure waveIndex is valid in Parse_rgn() in eas_mdls.c.
d18e7fb : Check segments and libs

+- Project: platform/external/sqlite

f8ed480 : sqlite: upgrade to SQLite 3.8.6.1 - DO NOT MERGE

+- Project: platform/external/tremolo

981e875 : Add sanity checks to fix crash
354b331 : Fix vorbis decoder crash due to out of bounds memory access
8d398eb : Fix allocation failure crash

+- Project: platform/frameworks/av

9513029 : DO NOT MERGE - Fix software video decoder buffer size calculation
7737a94 : libstagefright: fix overflow in pvdec_api.cpp.
7bd4e71 : Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"
3021ec3 : libstagefright: check memory size for overflow before allocation.
824a91e : DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data.
b284823 : libstagefright: check overflow before memory allocation in OMXCodec.cpp
51ffa0b : Prevent integer issues in ID3::Iterator::findFrame
b071d94 : DO NOT MERGE Part of fix for libmedia OOB write anywhere
1cd8e17 : libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets.
2a88b64 : Check RTSP payload length
5b89968 : libstagefright: Fix crash in convertMetaDataToMessage
9915646 : libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable.
749cc1e : DO NOT MERGE - audio flinger: fix fuzz test crash
af29aba : Sanity check padding/delay values for gapless playback
3db5231 : SoftAVCEncoder: fix auto merge error, member names have changed.
0071d87 : MatroskaExtractor: detect infinite loop when parsing NALs
04140c8 : Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354
7a7100f : SoftAVCEncoder: fix mismatched type for comparison.
7e7e3c1 : Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
c0516d6 : MPEG4Source::fragmentedRead: check range before writing into buffers
0da401c : Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
0eef754 : do not dequeue from native window after we hit fatal error -- DO NOT MERGE
f21f423 : libstagefright: check remaining data size before parsing it.
53e6c35 : SoftAVCEnc: check requested memory size before allocation.
e88d2ac : Check integer overflow to prevent memory corruption
21c79a5 : SoftOpus: Fix output buffer capacity.
e26e1bd : Check buffer size before using it
d9ec03a : Fix comparison sign warnings.
8560d9d : ABuffer: reset members when memory allocation fails.
fa7ef6c : Check vector size before accessing
f188532 : libstagefright: fix possible overflow in amrwbenc.
6637504 : libstagefright: fix possible overflow in ID3.
e0c4398 : Fix Ogg album art
6004bf7 : MPEG4Extractor.cpp: Add check for size == SIZE_MAX
4d88d40 : Extra sanity checks on sample size and resolution
bd5a03e : Fix crash on malformed id3
e302423 : SampleTable: fix integer overflow checks.
1ad6814 : DO NOT MERGE - IAudioFlinger: add checks on binder calls

+- Project: platform/frameworks/base

7927a55 : [DO NOT MERGE] Bump up the timeout for uncrypt to 900s.
858470b : DO NOT MERGE. Truncate and ellipsize app name if too long for dialog.
e172d9c : Allow debugging only for apps forked from zygote

+- Project: platform/packages/apps/Bluetooth

014b90e : DO NOT MERGE Fix security vulnerabilities in permission of deleting MMS/SMS

+- Project: platform/system/core

e0a1714 : libutils: fix overflow in String8::allocFromUTF8
28a9f03 : libutils: fix overflow in SharedBuffer [DO NOT MERGE]
be20bb0 : Fix compile failure after rIfe1dc0791040150132bea6884f1e6c8d31972d1b

+- Project: platform/system/security

3e8ea9a : Properly check for Blob max length