)]}'
{
  "commit": "6654633902f82a2ca2191abbea06dfa274574570",
  "tree": "83af93b525b10c456b11c36d1e47f1120ee59717",
  "parents": [
    "d74fdb8ae7d4ae9258e7b365713a686c32841915"
  ],
  "author": {
    "name": "Shuzhen Wang",
    "email": "shuzhenwang@google.com",
    "time": "Fri Jun 12 16:40:42 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Mon Jul 13 16:34:46 2026 -0700"
  },
  "message": "Camera: Fix heap OOB read/write in camera mappers\n\nChange loop conditions in camera mappers (ZoomRatioMapper,\nDistortionMapper, RotateAndCropMapper, and correctMeteringRegions)\nto use `j + 5 \u003c\u003d entry.count` instead of `j \u003c entry.count`.\nThis prevents heap out-of-bounds read and write when a\nCaptureRequest contains a metering region with element count\nthat is not a multiple of 5.\n\nBug: 514726373\nTest: cameraservice_test_host\nFlag: EXEMPT BUGFIX\nTAG\u003dagy\nCONV\u003de33154fc-dbf8-4f7d-ae71-88376924887a\n\n(cherry picked from commit cc78e7aa1be9e586e9f2c54b6c638a6f13954891)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:02cbad1d68f278f362207c035b8f0d559009f9bf\nMerged-In: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\nChange-Id: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f0764b46a8e4d79fc5fae33472e5144fcbbbe927",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
      "new_id": "f8d99564d1c00c797cabd26a217e402bd2d65e18",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "9cdd365bd2a683ed5697f0e7d1b28a2271a2a495",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
      "new_id": "2efefa636045342e9edf7796065d72d2ce340a85",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "aaa1b7015bd3a3e630fba637b6a330530afe98c1",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
      "new_id": "897c536e0e0d15cfe9b3bd928f0d1fd07e28064b",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "b3675715437dd0db669e6b5876f6a9911a5f2852",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp",
      "new_id": "b57ecc2f86a14946bc61f015eb3bf3c2e9203d40",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "9f86526a8c03c12ee278f779f8233dec0eff1312",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp",
      "new_id": "b8e914ba42db06b2e6dd471c93c265bbed59e329",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "badd47aad5a86a3a834b0115dec54a5b455ffb47",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp",
      "new_id": "4724901ed3c9193f7610177097b0a5ba2b2fa11f",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp"
    }
  ]
}