)]}'
{
  "commit": "77f8ddbbd65b2ff0dbe212e6f182e6a554869bf3",
  "tree": "08259de2bf806f59cde92e1a276fc6697c4689d7",
  "parents": [
    "db4f7fd08e40617b9fda0ff9c0addb7ddb847186"
  ],
  "author": {
    "name": "Shuzhen Wang",
    "email": "shuzhenwang@google.com",
    "time": "Fri Jun 12 16:40:42 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Mon Jul 13 17:41:33 2026 -0700"
  },
  "message": "Camera: Fix heap OOB read/write in camera mappers\n\nChange loop conditions in camera mappers (ZoomRatioMapper,\nDistortionMapper, RotateAndCropMapper, and correctMeteringRegions)\nto use `j + 5 \u003c\u003d entry.count` instead of `j \u003c entry.count`.\nThis prevents heap out-of-bounds read and write when a\nCaptureRequest contains a metering region with element count\nthat is not a multiple of 5.\n\nBug: 514726373\nTest: cameraservice_test_host\nFlag: EXEMPT BUGFIX\nTAG\u003dagy\nCONV\u003de33154fc-dbf8-4f7d-ae71-88376924887a\n\n(cherry picked from commit cc78e7aa1be9e586e9f2c54b6c638a6f13954891)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:b7a783e8955afec2e8cfffa878334ba471dae93a\nMerged-In: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\nChange-Id: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9a4e9e34b0e3129ad2a39e0dc5f3733e11da393a",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
      "new_id": "b2205048c0e8bd28e549f25aaebf3e1321de4bc5",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "1ea077c30d1b1956f955695c6ff31058151ef57a",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
      "new_id": "256a6f8d529d310c9ad08e64e1626ba22fa646c1",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "ef2109adf9f0f8da6c3c28bfe129b9bdf3b140ff",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
      "new_id": "d9c7bef622f04de3e50797a89e5d5dabc5d0ecc3",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "33cc61aecb4aed57c22f8348cc0f925ea7dd9193",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp",
      "new_id": "26c250729dc6a87479f54c5a585b2c248bc0dfae",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "9f86526a8c03c12ee278f779f8233dec0eff1312",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp",
      "new_id": "b8e914ba42db06b2e6dd471c93c265bbed59e329",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "f00d1e76e02348eede0ce4d31182fc78369b5b49",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp",
      "new_id": "e6b9a10468ce9a127694248c2b787283a542e327",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp"
    }
  ]
}