{"push_id":922373630,"size":23,"distinct_size":23,"ref":"refs/heads/marshmallow","head":"8db3b2e314e01f3ff52787f2d328006ba5bdb8e5","before":"83a9cf93d5383f017fecb41a8be263ac1e1e5031","commits":[{"sha":"27fdf2c8e5ddf07d97448c7a8c9adcf9083c55bb","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@android.com","name":"The Android Automerger"},"message":"MMB29N","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/27fdf2c8e5ddf07d97448c7a8c9adcf9083c55bb"},{"sha":"06581f3f89ab131eb3f3dd2da4a7f0709b9e1e6f","author":{"email":"704f922f1ae53484be638f437139664ed4b8ef3f@google.com","name":"Bart Sears"},"message":"Change version back to 6.0\n\nTemporarily set the version back to 6.0 and security patch to\n2015-11-01.\n\nChange-Id: Idb09d6bab89362b18ae9657e3ed931d614c1894b","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/06581f3f89ab131eb3f3dd2da4a7f0709b9e1e6f"},{"sha":"a625957dc9e7a63100abc7a6e0bee6c81f9106c9","author":{"email":"704f922f1ae53484be638f437139664ed4b8ef3f@google.com","name":"Bart Sears"},"message":"Revert \"Change version back to 6.0\"\n\nThis reverts commit 970f203b3d3f17b778749c3ce47eb6b922aa606c.\n\nChange-Id: Icd96990f128e303b0e2af5af0f0d4a0f7731fe60","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/a625957dc9e7a63100abc7a6e0bee6c81f9106c9"},{"sha":"cfcece834c21490b17f8110dd33ce58d0d1ab0b0","author":{"email":"940e01bec89f8db122f643d61cd1c6bd429fa802@google.com","name":"Zach Jang"},"message":"Update Security String to 2016-01-01 to mnc-dev\n\nhttp://b/25819582\n\nChange-Id: Ie55f9476110b08591da05774f582a6e48ce12de7","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/cfcece834c21490b17f8110dd33ce58d0d1ab0b0"},{"sha":"e8856b3e2a0221d0ea7658b5ad680295682e74c3","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB29O\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/e8856b3e2a0221d0ea7658b5ad680295682e74c3"},{"sha":"4f09dc325dc13ec9f82631004f77a3a0633ae813","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@android.com","name":"The Android Automerger"},"message":"MMN29P","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/4f09dc325dc13ec9f82631004f77a3a0633ae813"},{"sha":"7692803bd2342c12f4604a5321ccf40ff796869c","author":{"email":"940e01bec89f8db122f643d61cd1c6bd429fa802@google.com","name":"Zach Jang"},"message":"Update Security String to 2016-02-01\n\nb/26110717\n\nChange-Id: I1085f5d053b07c6c81d2ef22fbba5ab9157a67f2","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/7692803bd2342c12f4604a5321ccf40ff796869c"},{"sha":"1bd25272af230b56244fb57233c3abc14ff1109e","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB29Q\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/1bd25272af230b56244fb57233c3abc14ff1109e"},{"sha":"214120c6a3387b8cf684c6afd747b47868a20f1c","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB29R\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/214120c6a3387b8cf684c6afd747b47868a20f1c"},{"sha":"1cd2da826633c9c31cd82a0b5483c0556d526f1b","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"merge in mnc-mr1-release history after reset to mnc-dr-dev","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/1cd2da826633c9c31cd82a0b5483c0556d526f1b"},{"sha":"577db958f02ad84ac4e1bc16c8fdd8b687619b7b","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB76\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/577db958f02ad84ac4e1bc16c8fdd8b687619b7b"},{"sha":"f8f74abb33ad330cb92ee7741620ab1c26082c8b","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"merge in mnc-mr1-release history after reset to mnc-dr-dev","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/f8f74abb33ad330cb92ee7741620ab1c26082c8b"},{"sha":"277aef032a0bd98434a73a90fb4749727cc1ae7f","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB29S\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/277aef032a0bd98434a73a90fb4749727cc1ae7f"},{"sha":"a492780e9f68070da65e9b3f6cbff7bc37415f27","author":{"email":"44ed73fc809c6b960bf30fe746238868d5c71837@google.com","name":"The Android Automerger"},"message":"\"MMB29T\"","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/a492780e9f68070da65e9b3f6cbff7bc37415f27"},{"sha":"773b25b1dc3b210ac175b6c0241746771f790adf","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"default to -fwrapv to work around broken code\n\nThe issue of broken signed overflow checks being removed by (valid)\ncompiler optimizations is fairly common. Default to sane language\nsemantics instead of the strict interpretation of the standard.","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/773b25b1dc3b210ac175b6c0241746771f790adf"},{"sha":"8606547d68565dca0d47eb04ba4def7f165549f2","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"use -fstack-check for GCC on x86 and x86_64\n\nThe -fstack-check switch prevents harmful stack overflows by enforcing\nthe guarantee that the guard page at the end of stacks will be hit. It\ndoes this by injecting one byte writes for large uninitialized frames\nand any usage of alloca. It rarely needs to do anything because these\ncases are rare. Bionic includes a single guard page by default which is\nall that's required for this to work.\n\nWithout this feature, even \"correct\" code can cause a stack overflow\novershooting the guard page. The most significant change is that an\nunbounded alloca can only cause a denial of service since it will\nreliability trigger a segfault. The stack protector feature can only\ncatch buffer overflows past the stack frame boundary, so it provides no\nprotection against these issues.\n\nLLVM only supports this feature on Windows right now where it's a hard\nrequirement of the platform ABI. A more generic version has been\nimplemented but hasn't yet landed.\n\nIn GCC, this feature works well on x86 and x86_64 where there are robust\nplatform-specific implementations, but the generic fallback used on ARM\nand some other architectures is broken:\n\nhttps://gcc.gnu.org/bugzilla/show_bug.cgi?id=65958","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/8606547d68565dca0d47eb04ba4def7f165549f2"},{"sha":"a0f751289d9f45f08c5a265c8222a4cdb79310a5","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"add -Wsuggest-attribute=format","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/a0f751289d9f45f08c5a265c8222a4cdb79310a5"},{"sha":"fd30fd00c06215c8a30ad0e8316062aca7e14eec","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"enable lightweight bounds checking when available","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/fd30fd00c06215c8a30ad0e8316062aca7e14eec"},{"sha":"98bf8227238e4fa3be792e45a3f527c34372c525","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"enable -fstack-protector-strong\n\nThis results in nearly all functions with the possibility of stack\ncorruption getting stack canaries, because it applies to any function\ntaking a reference to the frame or with a local array rather than just\nthe functions with arrays larger than 8 bytes. It was developed for use\nin Chrome (and Chrome OS) and has also been adopted by various other\ndistributions (Arch, Fedora, Ubuntu, etc).\n\nThe code size increase ranges from ~1.5% to ~2.5%, compared to ~0.3% to\n~0.7% with the more conservative switch. The increase in the performance\nloss is usually minimal. The overall size increase once everything other\nthan C and C++ code is taken into account is minimal, and it greatly\nimproves the mitigation of stack buffer overflow vulnerabilities.\n\nhttps://lwn.net/Articles/584225/","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/98bf8227238e4fa3be792e45a3f527c34372c525"},{"sha":"b6ffeb126fd1715299ef0df0a42e184a028efe1b","author":{"email":"28efa798da98745d6a98078b320edd33f229eda6@gmail.com","name":"Daniel Micay"},"message":"set ro.adb.secure=1 for user builds\n\nIn user builds, adb without authentication is always disabled. However,\nit doesn't work with the defaults because authentication doesn't work\nwithout having ro.adb.secure=1 set. It makes sense to offer builds with\nno adb but not builds with adb present in an unusable state (especially\nas the default).","distinct":true,"url":"https://api.github.com/repos/CopperheadOS/platform_build/commits/b6ffeb126fd1715299ef0df0a42e184a028efe1b"}]}