{"push_id":1260242446,"size":24,"distinct_size":24,"ref":"refs/heads/marshmallow-dr1.6-release","head":"9120906f04c963d7175154e78f580c62e08dc128","before":"5aacd15aa7d0985fb7ce15fcd5bb2c310fa881b9","commits":[{"sha":"11263a88f2debbf792e84b301fff2f07be67e188","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"default to -fwrapv to work around broken code\n\nThe issue of broken signed overflow checks being removed by (valid)\ncompiler optimizations is fairly common. Default to sane language\nsemantics instead of the strict interpretation of the standard.","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/11263a88f2debbf792e84b301fff2f07be67e188"},{"sha":"deed569c66e43d53251ad311fe4f516e17e4bb11","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"use -fstack-check for GCC on x86 and x86_64\n\nThe -fstack-check switch prevents harmful stack overflows by enforcing\nthe guarantee that the guard page at the end of stacks will be hit. It\ndoes this by injecting one byte writes for large uninitialized frames\nand any usage of alloca. It rarely needs to do anything because these\ncases are rare. Bionic includes a single guard page by default which is\nall that's required for this to work.\n\nWithout this feature, even \"correct\" code can cause a stack overflow\novershooting the guard page. The most significant change is that an\nunbounded alloca can only cause a denial of service since it will\nreliability trigger a segfault. The stack protector feature can only\ncatch buffer overflows past the stack frame boundary, so it provides no\nprotection against these issues.\n\nLLVM only supports this feature on Windows right now where it's a hard\nrequirement of the platform ABI. A more generic version has been\nimplemented but hasn't yet landed.\n\nIn GCC, this feature works well on x86 and x86_64 where there are robust\nplatform-specific implementations, but the generic fallback used on ARM\nand some other architectures is broken:\n\nhttps://gcc.gnu.org/bugzilla/show_bug.cgi?id=65958","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/deed569c66e43d53251ad311fe4f516e17e4bb11"},{"sha":"e5bb7aa8cf723bc384063665a45336651c6f1fb4","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"add -Wsuggest-attribute=format","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/e5bb7aa8cf723bc384063665a45336651c6f1fb4"},{"sha":"cdf264ea19aaab4f214a62e935e6bcad7a8e3d76","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"enable lightweight bounds checking when available","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/cdf264ea19aaab4f214a62e935e6bcad7a8e3d76"},{"sha":"90e253cb5c995e520688e0a37285452fee8e213e","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"enable -fstack-protector-strong\n\nThis results in nearly all functions with the possibility of stack\ncorruption getting stack canaries, because it applies to any function\ntaking a reference to the frame or with a local array rather than just\nthe functions with arrays larger than 8 bytes. It was developed for use\nin Chrome (and Chrome OS) and has also been adopted by various other\ndistributions (Arch, Fedora, Ubuntu, etc).\n\nThe code size increase ranges from ~1.5% to ~2.5%, compared to ~0.3% to\n~0.7% with the more conservative switch. The increase in the performance\nloss is usually minimal. The overall size increase once everything other\nthan C and C++ code is taken into account is minimal, and it greatly\nimproves the mitigation of stack buffer overflow vulnerabilities.\n\nhttps://lwn.net/Articles/584225/","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/90e253cb5c995e520688e0a37285452fee8e213e"},{"sha":"ab160a4789092ef6f197e7da3ba8eed62ca85c16","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"set ro.adb.secure=1 for user builds\n\nIn user builds, adb without authentication is always disabled. However,\nit doesn't work with the defaults because authentication doesn't work\nwithout having ro.adb.secure=1 set. It makes sense to offer builds with\nno adb but not builds with adb present in an unusable state (especially\nas the default).","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/ab160a4789092ef6f197e7da3ba8eed62ca85c16"},{"sha":"11933bf0f9de5a085d962c69a1c7c9dbeca0b3fc","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"enable net.tethering.noprovisioning","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/11933bf0f9de5a085d962c69a1c7c9dbeca0b3fc"},{"sha":"bb59bc75cfd7c52a0127c5ce5e70c45c61cb2df2","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"replace Browser app with Chromium","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/bb59bc75cfd7c52a0127c5ce5e70c45c61cb2df2"},{"sha":"cb8bb2c5a7dd73c0aaf8e9b01a344c4209d811d5","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"switch to SMSSecure as the messaging app","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/cb8bb2c5a7dd73c0aaf8e9b01a344c4209d811d5"},{"sha":"ce165a2b850c7a416a2868243c3c6ff33a07c818","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"add Updater app","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/ce165a2b850c7a416a2868243c3c6ff33a07c818"},{"sha":"0e3b7372cf7448440674d9677af1bf6471f9b228","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"remove the obsolete QuickSearchBox app","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/0e3b7372cf7448440674d9677af1bf6471f9b228"},{"sha":"ca24fed467152d17b8cb2751987ecae01e784c78","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"show SELinux status in Settings","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/ca24fed467152d17b8cb2751987ecae01e784c78"},{"sha":"dc45a009885702abee0b7e0d7ec348b0957612fc","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"add F-Droid app","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/dc45a009885702abee0b7e0d7ec348b0957612fc"},{"sha":"0d8ab1833d9f2c12d1ab3d6d8d18191d033b3ed4","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"img_from_target_files: add no compression support","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/0d8ab1833d9f2c12d1ab3d6d8d18191d033b3ed4"},{"sha":"c201df6c14bdc2ceadb56b8b6ec1f36c7ddc97b2","author":{"name":"Alistair Strachan","email":"b0bac16edb79c886e2a95d35b137cc1b150341ab@imgtec.com"},"message":"Avoid accidentally using the host's native 'as' command.\n\nWhen invoking clang for the host to assemble .S files, the -B flag\nwould not be provided, which allowed the host prebuilt clang to\nuse an 'as' from the native environment. Most of the time this\n\"just works\", but some newer 'as' versions cause problems with\nthe older prebuilt toolchain, for example by generating\nunsupported relocation types.\n\nTo avoid this problem, simply use the -B flag to tell clang to\ninvoke the assembler from the correct prebuilt gcc prefix.\n\nChange-Id: I18ea4f37ae637b652cfd7321c41929f8be075342\nSigned-off-by: Alistair Strachan <alistair.strachan@imgtec.com>","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/c201df6c14bdc2ceadb56b8b6ec1f36c7ddc97b2"},{"sha":"d9f6a368fe3110406ecce3e870ff96ecc558c3e7","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"add -Wdate-time\n\nChange-Id: I7183c04aece11b40a64a3d3dba26f34b19ca7dc4","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/d9f6a368fe3110406ecce3e870ff96ecc558c3e7"},{"sha":"3ac802f0035981dd1383b052731eeae736a908a7","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"set deny_new_usb feature to dynamic by default\n\nChange-Id: Ied8e75e6c7f8cc5e1483fe93281a32fe799638c3","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/3ac802f0035981dd1383b052731eeae736a908a7"},{"sha":"6375d59666ee1967f3fb95148b354ce8e023bf7e","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"use GPL3 as the standard license for all CopperheadOS enhancements\n\nChange-Id: Ib7e5f2a7523a52f6f526a8ff74e5139621adc9d1","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/6375d59666ee1967f3fb95148b354ce8e023bf7e"},{"sha":"70e8cb478af8f4aeebe45d4e44b8b536afdab854","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"add -Wvla -Wno-error=vla\n\nChange-Id: Ia9cbb0cc6ed8e3f8791c792b88c29f3f04f2e244","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/70e8cb478af8f4aeebe45d4e44b8b536afdab854"},{"sha":"2e8a63d4ff89a75b693cc8da83744670715ea364","author":{"name":"Daniel Micay","email":"56a4f5a14d32bfcf295ef186e01c362d3f5fc20f@gmail.com"},"message":"only warn on deprecated declarations for now\n\nChange-Id: I4cfadef42abf0c0113f2dce08a70eac0df8fd8e1","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/2e8a63d4ff89a75b693cc8da83744670715ea364"}]}
{"actor":{"display_login":"thestinger"}}