)]}'
{
  "commit": "9456667afa012cfa93619337839e48abcc5b9842",
  "tree": "e1a7187a9989563d67ee97e3fbbdc694b87c500d",
  "parents": [
    "9b0bc5f798529f93f01d208c87d15b447b60d114"
  ],
  "author": {
    "name": "Venkatarama Avadhani",
    "email": "venkataramaa@google.com",
    "time": "Wed May 20 11:56:27 2026 +0530"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Fri Jul 10 08:22:42 2026 -0700"
  },
  "message": "Fix signed overflow in convertCleanApertureToRect\n\nIn HeifCleanAperture.cpp:convertCleanApertureToRect(),\ncenterX.getInt32() and centerY.getInt32() are added with clapW and\nclapH respectively to calculate the right and bottom coordinates.\nThis signed-integer addition can overflow int32_t with maliciously\ncrafted CleanAperture values, causing an IntSan abort in the\nmedia.extractor process.\n\nPrevent the overflow by validating bounds using safe int64_t arithmetic\nprior to performing the addition.\n\nBug: 503550257\nTest: atest HeifCleanApertureUnitTest --host\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:5fcd67a562a2dffdfaf25f35c7acf805a96ac8ae\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:4ee19decff042654c08cd62ece8cc8e0de15d06f\nMerged-In: I2b282fc9e69a6510e9414fd2bbfe3beddf81001e\nChange-Id: I2b282fc9e69a6510e9414fd2bbfe3beddf81001e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f0a086703effafd42958ab0847f597ccea1d91a2",
      "old_mode": 33188,
      "old_path": "media/module/extractors/mp4/HeifCleanAperture.cpp",
      "new_id": "7d78f0e869284ce6b13884031734208f644dfc52",
      "new_mode": 33188,
      "new_path": "media/module/extractors/mp4/HeifCleanAperture.cpp"
    },
    {
      "type": "modify",
      "old_id": "6a84ae3e1be51bd1ff61303eea7a941be824692c",
      "old_mode": 33188,
      "old_path": "media/module/extractors/mp4/tests/HeifCleanApertureUnitTest.cpp",
      "new_id": "ef95896a38af6be641ae6d4cf6e9362d839e9a71",
      "new_mode": 33188,
      "new_path": "media/module/extractors/mp4/tests/HeifCleanApertureUnitTest.cpp"
    }
  ]
}