)]}'
{
  "commit": "0dc8fad0162803ab42eb098e7f6a16e86313ceb2",
  "tree": "d6635c7062cd93eee24747405cbba962b4b0051f",
  "parents": [
    "c9291e2dc1a7990b33db4f2674d066d09326f675"
  ],
  "author": {
    "name": "Kyle Hsiao",
    "email": "kylehsiao@google.com",
    "time": "Fri Apr 24 03:31:02 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Fri Jul 10 00:59:02 2026 -0700"
  },
  "message": "Fix bounds check underflow and GKI buffer leak in T4T write\n\nAdd checks to ensure that p_t4t-\u003emax_update_size is larger than the\ndata_header size before calculating data_length. This prevents a potential underflow when the maximum update size is insufficient for the ODO/DDO header. Additionally, ensure that the allocated C-APDU buffer (p_c_apdu) is freed via GKI_freebuf(p_c_apdu) before returning false on these new safety check paths in rw_t4t_set_ber_tlv() to prevent GKI buffer memory leaks.\n\nBug: 498891727\nBug: 508389525\nTest: Manual\nFlag: EXEMPT BUGFIX\n(cherry picked from commit 91208e26395b1ac6ffb38e5d1bb9abf366ed8134)\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:6f500e02dda2ca267224403bbf84967f2063e9b7\nMerged-In: Ia2fb76f73a5f3e99476922101a43d3d8b0505214\nChange-Id: Ia2fb76f73a5f3e99476922101a43d3d8b0505214\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "246415271ea5e159ef8ba40bbb1bbb16eed63e2f",
      "old_mode": 33188,
      "old_path": "libnfc-nci/src/nfc/tags/rw_t4t.cc",
      "new_id": "e1fdb49ab0dfd9e4c6e067f8fbd829f0eabed2d7",
      "new_mode": 33188,
      "new_path": "libnfc-nci/src/nfc/tags/rw_t4t.cc"
    }
  ]
}