)]}'
{
  "commit": "aff9120ec0b8cb6194b3772793cf6153f757980f",
  "tree": "7b31e80951e5a99421fa28e113b7e8fa9cd8bd44",
  "parents": [
    "6e240fe4061af5fae90974917dfd95efe2ab6a53"
  ],
  "author": {
    "name": "Shuzhen Wang",
    "email": "shuzhenwang@google.com",
    "time": "Fri Jun 12 16:40:42 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Mon Jul 13 18:00:37 2026 -0700"
  },
  "message": "Camera: Fix heap OOB read/write in camera mappers\n\nChange loop conditions in camera mappers (ZoomRatioMapper,\nDistortionMapper, RotateAndCropMapper, and correctMeteringRegions)\nto use `j + 5 \u003c\u003d entry.count` instead of `j \u003c entry.count`.\nThis prevents heap out-of-bounds read and write when a\nCaptureRequest contains a metering region with element count\nthat is not a multiple of 5.\n\nBug: 514726373\nTest: cameraservice_test_host\nFlag: EXEMPT BUGFIX\nTAG\u003dagy\nCONV\u003de33154fc-dbf8-4f7d-ae71-88376924887a\n\n(cherry picked from commit cc78e7aa1be9e586e9f2c54b6c638a6f13954891)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe\nMerged-In: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\nChange-Id: I2edb88dbf20a1979ffb00e774cbb126fd9232cc1\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9a4e9e34b0e3129ad2a39e0dc5f3733e11da393a",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
      "new_id": "b2205048c0e8bd28e549f25aaebf3e1321de4bc5",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "1ea077c30d1b1956f955695c6ff31058151ef57a",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
      "new_id": "256a6f8d529d310c9ad08e64e1626ba22fa646c1",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "ef2109adf9f0f8da6c3c28bfe129b9bdf3b140ff",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
      "new_id": "d9c7bef622f04de3e50797a89e5d5dabc5d0ecc3",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
    },
    {
      "type": "modify",
      "old_id": "33cc61aecb4aed57c22f8348cc0f925ea7dd9193",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp",
      "new_id": "26c250729dc6a87479f54c5a585b2c248bc0dfae",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/DistortionMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "9f86526a8c03c12ee278f779f8233dec0eff1312",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp",
      "new_id": "b8e914ba42db06b2e6dd471c93c265bbed59e329",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/RotateAndCropMapperTest.cpp"
    },
    {
      "type": "modify",
      "old_id": "f00d1e76e02348eede0ce4d31182fc78369b5b49",
      "old_mode": 33188,
      "old_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp",
      "new_id": "e6b9a10468ce9a127694248c2b787283a542e327",
      "new_mode": 33188,
      "new_path": "services/camera/libcameraservice/tests/ZoomRatioTest.cpp"
    }
  ]
}