)]}'
{
  "commit": "1e00537f8f438a9c9167e6d532c081d6401f1620",
  "tree": "287ab68aef4aca3c40520afa715a2362e3b4a8b8",
  "parents": [
    "fd2d5b431cc986e0a2823c6324d046aa6aa38bbd"
  ],
  "author": {
    "name": "Venkatarama Avadhani",
    "email": "venkataramaa@google.com",
    "time": "Wed May 20 11:56:27 2026 +0530"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Fri Jul 10 00:54:22 2026 -0700"
  },
  "message": "Fix signed overflow in convertCleanApertureToRect\n\nIn HeifCleanAperture.cpp:convertCleanApertureToRect(),\ncenterX.getInt32() and centerY.getInt32() are added with clapW and\nclapH respectively to calculate the right and bottom coordinates.\nThis signed-integer addition can overflow int32_t with maliciously\ncrafted CleanAperture values, causing an IntSan abort in the\nmedia.extractor process.\n\nPrevent the overflow by validating bounds using safe int64_t arithmetic\nprior to performing the addition.\n\nBug: 503550257\nTest: atest HeifCleanApertureUnitTest --host\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:5fcd67a562a2dffdfaf25f35c7acf805a96ac8ae\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:91c2a108e4ef9dda4e27c4b83b7fafc76b09cd55\nMerged-In: I2b282fc9e69a6510e9414fd2bbfe3beddf81001e\nChange-Id: I2b282fc9e69a6510e9414fd2bbfe3beddf81001e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f0a086703effafd42958ab0847f597ccea1d91a2",
      "old_mode": 33188,
      "old_path": "media/module/extractors/mp4/HeifCleanAperture.cpp",
      "new_id": "7d78f0e869284ce6b13884031734208f644dfc52",
      "new_mode": 33188,
      "new_path": "media/module/extractors/mp4/HeifCleanAperture.cpp"
    },
    {
      "type": "modify",
      "old_id": "6a84ae3e1be51bd1ff61303eea7a941be824692c",
      "old_mode": 33188,
      "old_path": "media/module/extractors/mp4/tests/HeifCleanApertureUnitTest.cpp",
      "new_id": "ef95896a38af6be641ae6d4cf6e9362d839e9a71",
      "new_mode": 33188,
      "new_path": "media/module/extractors/mp4/tests/HeifCleanApertureUnitTest.cpp"
    }
  ]
}