)]}'
{
  "commit": "e7824e85ad70db4cc019762ed5d51037c9b0c56e",
  "tree": "89535ee69095f517b8d5f1afc4a114bd4dfc8a3d",
  "parents": [
    "cfcef3f38c2fb053d66d1ba1aa081f62aad798a7"
  ],
  "author": {
    "name": "Taran Singh",
    "email": "tarandeep@google.com",
    "time": "Thu Jul 17 05:13:19 2025 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Fri Oct 10 14:09:50 2025 -0700"
  },
  "message": "Validate IME metadata before parsing\n\nMalicious IMEs can load an extremely large metaData for inputmethod xml\nwhich can lead to IMMS running out of memory while contructing\nInputMethodInfo.\nthis change limits the size of metadata xml to 200KBs and would throw\nXmlPullParserException for xmls larger than that.\n\nBug: 416259832\nTest: Manually using steps in the bug\nFlag: EXEMPT bug_fix\n(cherry picked from commit 5e31d9c067f0ef88848dfc16aff66fabc53bd638)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:b417c7c9102e5510da35dbfc771eab3fe1dc670d\nMerged-In: Ic90e1bd6615f5954577ed29c3daf7b44596fb137\nChange-Id: Ic90e1bd6615f5954577ed29c3daf7b44596fb137\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "11ee286652a190350951ae3a90f83fbe415bf31b",
      "old_mode": 33188,
      "old_path": "core/java/android/view/inputmethod/InputMethodInfo.java",
      "new_id": "3cccc9979438cac6bb95f403c78c8d224abdfb5d",
      "new_mode": 33188,
      "new_path": "core/java/android/view/inputmethod/InputMethodInfo.java"
    }
  ]
}
