updates

Start
Git log from 'android-7.1.1_r26' to 'android-7.1.1_r38'

#
##
bionic
##
#

e04608196aae9d4afbc08294d01a419cca312e6a Check for bad packets in getaddrinfo.c's getanswer.

#
##
bootable/recovery
##
#

2c6c23f651abb3d215134dfba463eb72a5e9f8eb Add a checker for signature boundary in verifier

#
##
build
##
#

4f8059156df91195e808b518238dde2313494614 N6F26Y
9ecf3a2cd23809cdad5d41c9cbddb6362f1ce3bb Revert patch string from 2017-04-05 to 2017-04-01
26a00ee91b273e8aa00b28fb9cc83320d15ec950 N6F26X
20ca861bd545982ec7b75bd2e6c6d96de4d8c66e N6F26W
f39d06d80b584875488e9c29db336ffd58e59fc0 Update Security String to 2017-04-05 on nyc-dev
3e8699d8e071d1a19d16dc3df6f8580dba7523a7 Update Security String to 2017-04-01 on nyc-dev
9ef8e650c4a08a5be9590d97a3f31479969ea3df N6F26V
e22d5db4768a0a2351ccf96726f2222642329007 N6F26U
722ccd67cb72fb7f6d3b0cc7be37dd74fb4c2332 N6F26T
88463b6f0a3ab15554fe222c9e791212b1adabdf N6F26S
a6da47e68e45f3221312ecff8547cf829e5ee687 Updating Security String to 2017-03-05 on nyc-dev
9aee59b860d129f4c27080fa9a9b276ffa2c070a Updating Security String to 2017-03-01 on nyc-dev
8a89878a79e4b2381e0d32f2b8e4ecf06b4cce52 N6F26R
e225344f6df623646a2a66b40b6cbde6d0de3734 Update Security String to 2017-02-05 on nyc-dev
8e84b75d1f6b6cc1e8d4188c42aecd4b3efcafa5 Update Security String to 2017-02-01 on nyc-dev
cf7e2da83bb7997585652b2170c15b5824bb44e5 N6F26Q
a618563c350b50eed1e385e9e194044962e7c798 Updating Security String to 2017-01-05 on nyc-dev
1a90283da2aeb867be2edb889c16473d1345e169 Updating Security String to 2017-01-01 on nyc-dev

#
##
device/google/marlin
##
#


#
##
device/htc/flounder
##
#

a37d1ee49c58ae31c68809ca7d746b15ad29b8e2 Fix security issue in Visualizer effect

#
##
device/moto/shamu
##
#

67b5be442eb7966f2e4fe249a13af55505ef947a Revert "Revert "Revert "Path fix for backend connection to FE upon call disconnection"""
8e88ad7624cac817bb7b384bd566a9a0032f95ad Revert "audio: fix headset + speaker path"

#
##
device/sample
##
#

6afdbdd8134362e73727b1c3615e4653848a3856 DO NOT MERGE Keep APNs same as M for Canada carriers.

#
##
external/boringssl
##
#

54bf62a81586d99d0a951ca3342d569b59e69b80 Rewrite BN_bn2dec.

#
##
external/libavc
##
#

33c58f0bafb361a4653125290b2974257265f042 resolve merge conflicts of 3654ad0 to mnc-dr-dev
e3c28fd5c86145e8da4c0fa31a303f71b817272e Decoder: Fixed initialization of first_slice_in_pic
d7f020b42ef8fe89368aad2f4d2d96d3c372b910 Decoder: Moved end of pic processing to end of decode call
f9152b920c8657f5a8b6611d4fc67ce018ec0ee5 Decoder: Treat first slice in a picture as part of new picture always
11d7e64d3f6b391c0b3cef9c7031f78c73999bfc Decoder: Return correct error code for slice header errors
c75d1a74f69efe254a2069cc7700c62395a3e843 Decoder: Initialize default reference buffers for all pictures
7b7830aa23c244f24020e41ca0bfb8437cad938e Fix in returning end of bitstream error for MBAFF
809dd0292d9fcdd733fb7663c4d0dcebb6ef01a6 Decoder: Fixes an out of bound write in bitstream buffer
6aac82003d665708b4e21e9b91693b642e2fa64f Decoder: Padded gau1_ih264d_top_left_mb_part_indx_mod to avoid an out of bound read
0a4463e2beddb8290e05ad552e48b17686f854ce Decoder: Fix in checking first_mb_in_slice
4a61d15e7b0ab979ba7e80db8ddbde025c1ce6cc Decoder: Increase memory allocation for weights & offsets for interlaced clips
19814b7ad4ea6f0cc4cab34e50ebab2e180fc269 Decoder: Fixed DoS in header decode when no PPS is present
0340381cd8c220311fd4fe2e8b23e1534657e399 Decoder: Initialize ps_cur_slice->u1_mbaff_frame_flag correctly for error cases
85c0ec4106659a11c220cd1210f8d76c33d9e2ae Decoder: Fixed an out of bound access while parsing SEI
21851eaecc814be709cb0c20f732cb858cfe1440 Decoder: Fix in MB count in MBAff error handling
aa78b96e842fc1fb70a18acff22be35c7a715b23 Call ih264d_deblock_display only for valid process calls
ec9ab83ac437d31f484a86643e2cc66db8efae4c Decoder: Fixed allocation of ps_dec->ps_nbr_mb_row
fd9a12f9fdd9dd3e66c59dd7037e864b948085f7 Decoder: Fixed cur_mb_info initialization in error cases
a467b1fb2956fdcee5636ab63573a4bca8150dbe Decoder: Fix in error concealment in the case of Mbaff clips
0e8b1dff88e08b9d738d2360f05b96108e190995 Decoder: Fix in the case of error in the first MB in frame.
c4f152575bd6d8cc6db1f89806e2ba1fd1bb314f Decoder: Fix in returning incomplete frame error
3695b6bdaa183bb2852da06b63ebd5b9c2cace36 Decoder: Fix initialization of ps_next_dpb during reference list creation
cf606f3df2a7189049e0484af5558369df7e3eac Decoder: Fix in checking for valid profile flags

#
##
external/libgdx
##
#

eb13b1fbefc4a99a4e8bb2006b7e87cbebf72365 Security fix for overflow check.
fba04a52f43315cdb7dd38766822af0324eab7c5 Fix buffer overflows
c156e721c73ddb697827346581cd61e2655eca7d Fix security vulnerability

#
##
external/libhevc
##
#

edbd2a61bca4776bd0ab8ba5b700bcc5ef287a3d Handle invalid num_reorder_pics & max_dec_pic_buffering in SPS
d5736d921cb321050c3d0c7d355189cfac32c78f Fix in handling wrong cu_qp_delta
dfa7251ff270ae7e12a019e6735542e36b2a47e0 Added check for invalid log2_max_transform_block_size in SPS
3a64694b3c08da28735e7d3f986e98bd3d38a4e3 Fixed handling invalid chroma tu size for error clips
f22345dfd3cee9b1bad7672cda464f3a694223a8 Fixed out of bound reads in stack variables
e20f6b819e6fbada72a4a63edfa88f4c8e7a7332 Fix in Chroma SAO for non-multiple of 8 height
b25d141a4a5916149f7f673f5e239ccbcfbe5162 Handle invalid slice_address in slice header

#
##
external/libmpeg2
##
#

489ecbb6bfb9143a9416fcd6ca6f0a566045cea9 Check for Valid Frame Rate in Header
47a5c8b864998c89ad2022abb998bc0d063975d1 Error Check for VLD Symbols Read

#
##
external/libnfc-nci
##
#

c67cc6ad2addddcb7185a33b08d27290ce54e350 Fix native crash in nfc_ncif_proc_activate

#
##
external/libnl
##
#

ec857b51908a6e126d8e70ad0ce85719ece4c115 Perform range check on len in nlmsg_reserve
77a7bed5cb1bc350b86be49dc27e5f713480f119 libnl: Check data length in nla_reserve / nla_put

#
##
external/libopus
##
#

1ad80090a7d39a7e752274f67895c17b8677968e Ensure that NLSF cannot be negative when computing a min distance between them

#
##
external/libvpx
##
#

6f5927de29337fa532c64d0ef8c7cb68f7c89889 libvpx: Cherry-pick 1961a92 from upstream
145f317ddca317878ad0474ca56ab703c99bd8a5 vp8:fix threading issues

#
##
external/skia
##
#

167108bb595af3bb4a7534a2eadbbad9a23c56e7 Use fixed size buffer for RLE bmps DO NOT MERGE
df6e8ecb2246d4ce3d323ccec1d117c5ca68a792 Fix out of bounds memory read in GIFMovie.cpp
8888cbf8e74671d44e9ff92ec3847cd647b8cdfb DO NOT MERGE Do not create an SkRawCodec with zero dimensions

#
##
external/sonivox
##
#

95e014ec1e3cf267fe8aae6afe2cb08ef74fe7fb eas_mdls: fix OOB read.

#
##
external/tremolo
##
#

a4327f0516fbff3b2804482cb38e2cad52422dac Tremolo: fix ARM assembly code for decode_map type 3 case

#
##
frameworks/av
##
#

b39ad062d1ad6e0ec01379584a5347c19693365f resolve merge conflicts of 79cf158c51 to mnc-dev
2395604646cb0def40eeaa6046c5d39974147d93 EffectBundle: check nb channels to write speaker angles
d9bfa1e2ca0269c6d9e651fa56b44c346c4bfa7c Fix overflow check and check read result
f0ce53de75f9c0b9212054ba8d0fea16ca217abf CameraBase: Don't return an sp<> by reference
5cabe32a59f9be1e913b6a07a23d4cfa55e3fb2f avc_utils: skip empty NALs from malformed bistreams
8415635765380be496da9b4578d8f134a527d86b DO NOT MERGE - audioflinger: fix recursive mutex lock in EffectHandle.
bc62c086e9ba7530723dc8874b83159f4d77d976 Don't initialize sync sample parameters until the end
22e26d8ee73488c58ba3e7928e5da155151abfd0 DO NOT MERGE - improve audio effect framwework thread safety
048ba590876b50ad185ad9c82a399f620fcaf2ce Fix security vulnerability: potential OOB write in audioserver
bab10e44f1f790daa8b38f86fee4470aa5eb9da4 Effect: Use local cached data for Effect commit
e684672c6b18f705c0ea057b1d2907a3833e8d9c Fix security vulnerability: Effect command might allow negative indexes
4adf91c5b2255a53ffc5059c95a8aa9c1d155326 Make VBRISeeker more robust
70b95dda0658eca1393555b006995ac2df9e7fda Effects: Check get parameter command size
cdd16c8dd9421f080441c3e6573357e11f772c85 DO NOT MERGE: defensive parsing of mp3 album art information
adb860395b0799db14c8d8b38f69e223319c61e7 Fix security vulnerability: Equalizer command might allow negative indexes
a09eaa0a19cb8aa2aa7e2be068fcb3c19a89ae6c stagefright: remove allottedSize equality check in IOMX::useBuffer
0e1e9f41c5731e163b01c0f6e4d2dce494bad446 Visualizer: Check capture size and latency parameters

#
##
frameworks/base
##
#

b4062880f6dad0facf41a87a24cb0e0f17558e20 Do not write if apply() did not change the file.
e3462655acf5ff5dc8d6364eb92b757f0e3b5847 Only persist last Shared Preferences state
777ac41d1a507c154a4acb4979f0eb4dcb90aaab DO NOT MERGE Do not call RecoverySystem with DPMS lock held
164437c48d2fb7b47bff2c5d068f1851e6b86d47 Fixed the logic for tethering provisioning re-evaluation
7261a926a5b6b08a35d937bb922651a5d7f7e725 Fix issue with saving admins before finishing loading.
618391bd7cd5d3026636af32155db7ad5f3e953b resolve merge conflicts of ad4aa1ce7d3d to nyc-mr1-dev
d22261fef84481651e12995062105239d551cbc6 Fix exploit where can hide the fact that a location was mocked am: a206a0f17e am: d417e54872 am: 3380a77516 am: 0a8978f04b am: 1684e5f344 am: d28eef0cc2 am: 1f458fdc66 am: d82f8a67fc am: 1ac8affd51 am: 56098f81b6 am: 7cec76de0f am: 2da05d0f9e
f4bed684c939b0f8809ef404b8609fe4ef849263 [DO NOT MERGE] Prevent crash from early Toast surface destruction.
5f621b5b1549e8379aee05807652d5111382ccc6 Add @GuardedBy annotation to PersistentDataBlockService#mIsWritable.
1c4d535d0806dbeb6d2fa5cea0373cbd9ab6d33b Prevent writing to FRP partition during factory reset.
593144fa0129f09dc1992ea01b57fdb39fbbdf3f [DO NOT MERGE] Fix vulnerability in MemoryIntArray - fix build file
de5747dfe833c642c4800876248d0dd7fb79007c Fix vulnerability in MemoryIntArray
a66099e6f2284a4ad3f129a4813ad86797e5c309 DO NOT MERGE. Retain DownloadManager Uri grants when clearing.
4df434d0c61ca773c2e02ad2e1fee8b36e456d35 DO NOT MERGE: Check provider access for content changes.
faf904b9f9789d6e921ab0bf0fb788594f97ef3b Zygote : Block SIGCHLD during fork.
c4b8272fe4f663bb9f89ef222314b15f4b12b267 Fix idmap leak in zygote process
7f0c2c8a9cf9bda249cb79841a7b0eefd0e657b4 Zygote: Additional whitelisting for legacy devices.
f5224258edd6588046b987bd8484df2c100baadc Zygote: Additional whitelists for runtime overlay / other static resources.
def0efd8908c79b460721952a97614c45cf7630b Public volumes belong to a single user.
25ddf857509c8eba3d30c2f408c786818d14e150 Add SafetyNet logging to DHCP packet parsing
ec129c35601aed88fea7549165bf468e7b6d1cfa Reject DHCP packets with no magic cookie
c28117b04720844d37cbd593bc2738007aa28b9e Catch runtime exceptions when parsing DHCP packets

#
##
frameworks/ex
##
#

7c824f17b3eea976ca58be7ea097cb807126f73b resolve merge conflicts of 89cdd4cb to mnc-dev
30ee0df2a9066ef3d2ab7039a37cbc03c96a935e resolve merge conflicts of 3802db4 to mnc-dev

#
##
frameworks/native
##
#

e3fd69ce6c4b97cd835d20d96fa3d1cc34f1d088 Fix security vulnerability
541b1ebe0955ef40693b0746be2cd4f527feb7c2 Correct overflow check in Parcel resize code
74dae3378a4dfa885118f0ff5c807b42f3f9fb28 Fix security vulneratibly 31960359
509fb5c3719d6b1fa0adec3b85b21115692d5dae Fix SF security vulnerability: 32706020
38ac668e47f80b513cab10bab6af585d810f59c3 Fix SF security vulnerability: 32660278
9a8df9a20a808d336cd3334014d08cb3daefccfe Fix integer overflow in unsafeReadTypedVector

#
##
frameworks/opt/net/wifi
##
#

41c42f5bb544acf8bede2d05c6325657d92bd83c configparse: do not delete passpoint configuration file

#
##
hardware/libhardware
##
#

9f0e940329d43f3a8c18d46f7d7d7fe67532de79 Fix security vulnerability: potential OOB write in audioserver

#
##
hardware/qcom/audio
##
#

7e12c893a122acbafb6c067fd4daaabdc22528a5 Fix security vulnerability: Effect command might allow negative indexes
a0bfcdbbeda63c42808a800be27ed8c3b3d261a9 Fix security vulnerability: Equalizer command might allow negative indexes

#
##
libcore
##
#

c82a939cde1f47b2ab15ce03a33722853007ed27 Fix URLTest#testAtSignInUserInfo failure
54c9bd54949f75f7486dff9e24443e4cbaf90ba3 Pull upstream fix for CVE-2016-5552
c55ce33096e893e1f44bf7714ae72f471b5f5d95 Fix URL parser may return wrong host name

#
##
packages/apps/Bluetooth
##
#

379e7b623e979befbab166e1d025d955a8977b6b Remove MANAGE_DOCUMENTS permission as it isn't needed

#
##
packages/apps/CertInstaller
##
#

1ad3b1e3256a226be362de1a4959f2a642d349b7 WifiInstaller: add permission for access downloaded files
1166ca8adba9b49c9185dad11b28b02e72124d95 WifiInstaller: remove the installation file

#
##
packages/apps/ContactsCommon
##
#

80822d703db3f570dede42319db141f71d3c405b resolve merge conflicts of 9f523b4 to nyc-dev

#
##
packages/apps/Messaging
##
#

3f9821128abd66c4cd2f040d8243efb334bfad2d 32764144 Security Vulnerability - heap buffer overflow in libgiftranscode.so in colorMap->Colors[colorIndex]
8ba22b48ebff50311d7eaa8d512f9d507f0bdd0d 33388925  Mismatched new vs delete in framesequence library
1bb11f37f98e11e7925a8c1338ed951af476f027 resolve merge conflicts of eafd58a to nyc-dev
13f739b924062586859409cdb673f21150edb47d 32807795  Security Vulnerability - AOSP Messaging App: thirdparty can attach private files from "/data/data/com.android.messaging/" directory to the messaging app.
86e5bf5209b0949e980214b157d31a26bec91e16 32322450 Security Vulnerability - heap buffer overflow in libgiftranscode.so

#
##
packages/apps/PackageInstaller
##
#

5c49b6bf732c88481466dea341917b8604ce53fa Prioritize package installer intent filter

#
##
packages/apps/Settings
##
#

e41ac8114f4a6c8e655567e072141708be3d0230 Ignore orientation change to preserve ApnEditor.

#
##
packages/apps/UnifiedEmail
##
#

1fc7b0145e92edbcb8c0284beaadd3e7d46ce017 Don't allow file attachment from /data through GET_CONTENT.

#
##
packages/services/Telephony
##
#

c88b976d752199de1fc8d1e02733213f3e102fdf Added permission check for setCellInfoListRate
38b45bbcc18b77e947e8bb8b9ee7b3fe5c1d0d6f Catch SIP exceptions which can crash Phone process on answer.

#
##
system/bt
##
#

26758360604afce82ce65b4f3f5826652fdb959b Remove position dependent lookup tables in AT command parser

#
##
system/core
##
#

7f94bb41fc93ae784f6e01ef63ff1daf5a531122 change /data/bugreports to /bugreports

#
##
system/sepolicy
##
#

54a3eecf8883cb2a9a102e35e9f4fa7b9dadb056 label /bugreports