android-5.1.1_r23 to android-5.1.1_r24 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

1dd05bd : LMY48W
a531281 : "LMY48V"
cd811c3 : "LMY48U"
bd2ac50 : "LVY48H"
c845e59 : "LMY48T"
8e9b8d2 : LVY48G
d2a49a4 : LMY48S
12fe3d4 : LMY48R
5b1e35c : LMY48Q
cad7d3a : LMY48P
53fcd13 : "LMY48O"
03ca3af : "LVY48F"
09787c9 : "LMY48N"
3b9e3a3 : "LMY48M"
f165cfb : LMY48L
a3ebc82 : "LMY48K"
7c80b85 : "LVY48E"
c445cc3 : "LMY48J"
fa943a9 : "LMY48I"
e260e26 : "LVY48D"
e362738 : "LVY48C"
5a71557 : "LMY48H"
40be6ec : "LMY48G"
13f696e : "LMY48F"
546a5aa : "LMY48E"
38deeee : "LMY48D"
bca602e : "LMY48C"
5bd813f : "LVY48B"
5475640 : "LVY47Z"
6775a97 : "LVZ20"
0b02dd4 : "LMY48B"
8ef7842 : "LVY47X"
b49345d : "LVY47K"
a03e28a : "LVZ07"
a14c43f : "LVY47J"
8c3d038 : "LVY47I"
3dc1ee2 : "LVZ01"
9830104 : "LVY47H"
29f45d8 : "LVY47G"
609e3fd : "LVY47F"
35a48c6 : "LVY62"
dce4c51 : "LVY47E"
1349b15 : "LVY47D"
d0a45ac : "LVY50"
67169cf : "LVY47C"
50588a2 : "LVY47B"
9c95d87 : "LVY47"
bdeec0c : "LVY44"
885268a : "LVY41"
e8ea815 : LVY36F
31e3941 : "LVY36E"
b863c99 : "LVY36D"
cf3495b : LVY36C
74a5c02 : "LVY36B"
b90c6e0 : "LVY35D"
cfbcbc3 : "LVY35C"
700fb5d : "LVY35B"
6a17d6a : LVY35
f1bae0a : "LVY36"
3f2a597 : "LVY34B"
8a746ce : "LVY33"
12c5582 : LVY29G
1f73e71 : "LVY29F"
a00ec7b : "LVY29C"
c1d901e : "LVY29B"
653c85a : "LVY29"
e4570c4 : "LVY27B"
ef7e792 : "LVY28"
0fe1152 : "LVY22E"
98fb681 : "LVY26"
3ce16cb : "LVY15H"
efb18ab : "LVY15G"
00b2126 : "LVY15F"
a5def7f : "LVY15E"
74add38 : LVY15D
26ef3da : "LVY15C"
c0dd18c : "LVY16"
06f19f8 : "LVY12B"
2787067 : "LVY13"
12e930a : "LVY08E"
b569c5e : "LVY12"
cbc5dfe : "LVY06B"
bb7f484 : "LVY07"
776bc01 : "LVX72N"
8eca678 : "LMY02"
f7fc077 : "LVX72M"
b1682ad : "LVX72L"
8551158 : "LVX72K"
d2f3cbe : "LVX72J"
feeecee : LVX72I
bff4863 : "LVX78"
d6cde28 : "LVX72H"
1879686 : LVX72G
a44f27d : "LVX72F"
7b7ad72 : LVX65I
375cd9c : "LVX65H"
ecaf8ff : "LVX65G"
98fecb7 : "LVX65F"
cdf914c : "LVX65E"
1e6623d : "LVX65D"
ca5aa62 : "LVX65C"
083dc56 : "LVX55E"
e3ec9b3 : LVX44L
ffab718 : LVX44K
f90d4f6 : "LVX44J"
9a5396b : LVX44I
c8a68ff : LVX44H
b28957e : "LVX44G"
e75c1f9 : "LVX50"
e11182b : "LVX44F"
2314b97 : "LVX44E"
6274dc2 : Fix Build iD

+- Project: platform/cts

bf0aad4 : test if libFLAC is patched against CVE-2014-9028
e4f1a59 : CTS: check non-zygote apps are not debuggable
8e1c005 : test if libFLAC is patched against CVE-2014-9028
4d75179 : CTS: check non-zygote apps are not debuggable

+- Project: platform/dalvik

71eabef : Ensure deterministic multidex partitioning
0f6f6f4 : Ensure deterministic multidex partitioning

+- Project: device/lge/hammerhead

545aef9 : hammerhead: switch back to dlmalloc

+- Project: device/moto/shamu

aabcab8 : Config change to not show swap button after merging calls into Cdma conference.
170d5ab : Config change to not show swap button after merging calls into Cdma conference.
188333f : Config change to not show swap button after merging calls into Cdma conference.
a6f4aba : Config change to not show swap button after merging calls into Cdma conference.
ea782d1 : Config change to not show swap button after merging calls into Cdma conference.
cf68b24 : Add SELinux Policy for RILD to access FSG partition
08df735 : Config the default value for nova mcfg property

+- Project: platform/external/conscrypt

cb573b2 : OpenSSLX509Certificate: mark mContext as transient
edf7055 : OpenSSLX509Certificate: mark mContext as transient

+- Project: platform/external/flac

f9a86d0 : Add macro definitions for clang/llvm.
5fd657a : libFLAC: merge master from Xiph
30c7436 : Add macro definitions for clang/llvm.
ce4ad0e : libFLAC: merge master from Xiph

+- Project: platform/external/libhevc

5be3540 : Align pic_width_in_luma_samples and pic_width_in_luma_samples to 8
f17d126 : Align pic_width_in_luma_samples and pic_width_in_luma_samples to 8

+- Project: platform/external/libpng

275a4f8 : Restore a width check that was removed from png.c (CVE-2015-0973)
dd0ed46 : Restore a width check that was removed from png.c (CVE-2015-0973)

+- Project: platform/external/libvpx

2f49716 : Try to CP ag/749963 from klp-dev into lmp-mr1-release
e854406 : Try to CP ag/749963 from klp-dev into lmp-mr1-release

+- Project: platform/external/skia

2adfe26 : SkScaledBitmapSampler: fix memory overwritten
d4fb1c4 : SkScaledBitmapSampler: fix memory overwritten
8b3707d : DO NOT MERGE Prevent integer wrap around for malloc size when creating a SkRegion
e28401b : DO NOT MERGE Prevent integer wrap around for malloc size when creating a SkRegion

+- Project: platform/external/sonivox

cb21414 : Sonivox: check loopStart/loopLength against one specific wave, not whole wave pool.
584ecd1 : Sonivox: fix overflow in Parse_data in eas_mdls.c
e311210 : Sonivox: make sure waveIndex is valid in Parse_rgn() in eas_mdls.c.
d18e7fb : Check segments and libs
b022acb : Sonivox: check loopStart/loopLength against one specific wave, not whole wave pool.
9277722 : Sonivox: fix overflow in Parse_data in eas_mdls.c
bca9c89 : Sonivox: make sure waveIndex is valid in Parse_rgn() in eas_mdls.c.
0c3f41e : Check segments and libs
c76a325 : DLS parser: fix wave pool size check.
e999f07 : DLS parser: fix wave pool size check.

+- Project: platform/external/sqlite

f8ed480 : sqlite: upgrade to SQLite 3.8.6.1 - DO NOT MERGE
972023f : sqlite: upgrade to SQLite 3.8.6.1 - DO NOT MERGE

+- Project: platform/external/tremolo

981e875 : Add sanity checks to fix crash
354b331 : Fix vorbis decoder crash due to out of bounds memory access
8d398eb : Fix allocation failure crash
3cbc6eb : Add sanity checks to fix crash
8ab6638 : Fix vorbis decoder crash due to out of bounds memory access
bc8326c : Fix allocation failure crash

+- Project: platform/external/wpa_supplicant_8

f7a01d5 : P2P: Validate SSID element length before copying it
4cf0f2d : P2P: Validate SSID element length before copying it

+- Project: platform/frameworks/av

e79ea52 : Revert "DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance"
075552b : DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance
9513029 : DO NOT MERGE - Fix software video decoder buffer size calculation
7737a94 : libstagefright: fix overflow in pvdec_api.cpp.
7bd4e71 : Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"
3021ec3 : libstagefright: check memory size for overflow before allocation.
4f725ba : Revert "DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance"
5104178 : DO NOT MERGE - Fix software video decoder buffer size calculation
9245d5f : libstagefright: fix overflow in pvdec_api.cpp.
2e1c694 : Revert "Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4"
649eeb9 : libstagefright: check memory size for overflow before allocation.
824a91e : DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data.
b284823 : libstagefright: check overflow before memory allocation in OMXCodec.cpp
51ffa0b : Prevent integer issues in ID3::Iterator::findFrame
b071d94 : DO NOT MERGE Part of fix for libmedia OOB write anywhere
1cd8e17 : libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets.
2a88b64 : Check RTSP payload length
5b89968 : libstagefright: Fix crash in convertMetaDataToMessage
9915646 : libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable.
749cc1e : DO NOT MERGE - audio flinger: fix fuzz test crash
af29aba : Sanity check padding/delay values for gapless playback
3db5231 : SoftAVCEncoder: fix auto merge error, member names have changed.
0071d87 : MatroskaExtractor: detect infinite loop when parsing NALs
04140c8 : Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354
7a7100f : SoftAVCEncoder: fix mismatched type for comparison.
7e7e3c1 : Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
c0516d6 : MPEG4Source::fragmentedRead: check range before writing into buffers
0da401c : Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
0eef754 : do not dequeue from native window after we hit fatal error -- DO NOT MERGE
f21f423 : libstagefright: check remaining data size before parsing it.
53e6c35 : SoftAVCEnc: check requested memory size before allocation.
e88d2ac : Check integer overflow to prevent memory corruption
21c79a5 : SoftOpus: Fix output buffer capacity.
e26e1bd : Check buffer size before using it
d9ec03a : Fix comparison sign warnings.
8560d9d : ABuffer: reset members when memory allocation fails.
fa7ef6c : Check vector size before accessing
f188532 : libstagefright: fix possible overflow in amrwbenc.
6637504 : libstagefright: fix possible overflow in ID3.
e0c4398 : Fix Ogg album art
6004bf7 : MPEG4Extractor.cpp: Add check for size == SIZE_MAX
4d88d40 : Extra sanity checks on sample size and resolution
bd5a03e : Fix crash on malformed id3
e302423 : SampleTable: fix integer overflow checks.
1ad6814 : DO NOT MERGE - IAudioFlinger: add checks on binder calls
5e7815e : DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance
b3cc9b0 : DO NOT MERGE - SoftwareRenderer: sanity check buffer size before copying data.
e37e52e : libstagefright: check overflow before memory allocation in OMXCodec.cpp
0fd9ff7 : Prevent integer issues in ID3::Iterator::findFrame
3f8a389 : DO NOT MERGE Part of fix for libmedia OOB write anywhere
0cbede8 : libstagefright: fix overflow in MPEG4Source::parseSampleAuxiliaryInformationOffsets.
6be0261 : Check RTSP payload length
53cb6c3 : libstagefright: Fix crash in convertMetaDataToMessage
4a7e92a : libstagefright: fix handling of mSampleTimeEntries and mNumSampleSizes in SampleTable.
c7cf4c1 : DO NOT MERGE - audio flinger: fix fuzz test crash
8ca0d21 : Sanity check padding/delay values for gapless playback
0959f39 : SoftAVCEncoder: fix auto merge error, member names have changed.
520cd7c : MatroskaExtractor: detect infinite loop when parsing NALs
65b1cf3 : Fix for memory corruption in ID3::removeUnsynchronizationV2_4(). Bug: 23227354
bbff8c7 : SoftAVCEncoder: fix mismatched type for comparison.
815cc6c : Fix compile failure after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
73e9dfc : MPEG4Source::fragmentedRead: check range before writing into buffers
e856d51 : Fix compile after rI431aa2b7d30a942350ab6d105451c6b77e2f99d4
57beddd : do not dequeue from native window after we hit fatal error -- DO NOT MERGE
e88d81b : libstagefright: check remaining data size before parsing it.
53788a1 : SoftAVCEnc: check requested memory size before allocation.
9aa63d1 : Check integer overflow to prevent memory corruption
2bd303a : SoftOpus: Fix output buffer capacity.
61d9a7e : Check buffer size before using it
e15476a : Fix comparison sign warnings.
6fd029e : ABuffer: reset members when memory allocation fails.
6de921d : Check vector size before accessing
dedaadb : libstagefright: fix possible overflow in amrwbenc.
1e40ab3 : libstagefright: fix possible overflow in ID3.
0ff5f3e : Fix Ogg album art
ef387c2 : MPEG4Extractor.cpp: Add check for size == SIZE_MAX
f72b290 : Extra sanity checks on sample size and resolution
0dc89f5 : Fix crash on malformed id3
07f19ba : SampleTable: fix integer overflow checks.
0bfc375 : DO NOT MERGE - IAudioFlinger: add checks on binder calls
11202b5 : Revert "DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance"
e498ae6 : MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX
59e5d30 : Guard against codecinfo overflow
e29953f : DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance
6fe85f7 : MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX
304ef91 : Guard against codecinfo overflow
a5d9298 : Revert "DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance"
1809c2f : audio effects: fix heap overflow
6cc7fe0 : Prevent integer underflow if size is below 6
b242d24 : Prevent reading past the end of the buffer in 3GPP
b9bd167 : Prevent integer overflow when processing covr MPEG4 atoms
93ba37d : Fix integer overflow when handling MPEG4 tx3g atom
6e7e30d : Fix integer underflow in covr MPEG4 processing
b9f68d9 : IOMX: Enable buffer ptr to buffer id translation for arm32
409c1b9 : IOMX: Add buffer range check to emptyBuffer
f7ccdd3 : HDCP: buffer over flow check -- DO NOT MERGE
d0f6f43 : Add AUtils::isInRange, and use it to detect malformed MPEG4 nal sizes
f45c9fc : Add some sanity checks
86ae2ee : Fix integer underflow in ESDS processing
8d88192 : Fix integer overflow during MP4 atom processing
894c7ba : Fix several ineffective integer overflow checks
d776139 : DO NOT MERGE: Lock drm plugin API calls globally, not per MediaDrm instance
f4f7e0c : Prevent integer underflow if size is below 6
2674a72 : Prevent integer overflow when processing covr MPEG4 atoms
e846a5f : Prevent reading past the end of the buffer in 3GPP
aeea52d : audio effects: fix heap overflow
463a6f8 : Fix integer overflow when handling MPEG4 tx3g atom
f4a88c8 : Fix integer underflow in covr MPEG4 processing
3cb1b69 : IOMX: Enable buffer ptr to buffer id translation for arm32
086d84f : IOMX: Add buffer range check to emptyBuffer
c82e31a : HDCP: buffer over flow check -- DO NOT MERGE
d48f0f1 : Add AUtils::isInRange, and use it to detect malformed MPEG4 nal sizes
5150492 : Add some sanity checks
5e75195 : Fix integer underflow in ESDS processing
2434839 : Fix integer overflow during MP4 atom processing
cf1581c : Fix several ineffective integer overflow checks

+- Project: platform/frameworks/base

92451b8 : Revert "[DO NOT MERGE] Bump up the timeout for uncrypt to 900s."
7927a55 : [DO NOT MERGE] Bump up the timeout for uncrypt to 900s.
858470b : DO NOT MERGE. Truncate and ellipsize app name if too long for dialog.
e172d9c : Allow debugging only for apps forked from zygote
f4736a7 : [DO NOT MERGE] Bump up the timeout for uncrypt to 900s.
b314576 : DO NOT MERGE. Truncate and ellipsize app name if too long for dialog.
d4d3181 : Allow debugging only for apps forked from zygote
d4c926a : Prevent insanely long passwords from crashing SystemUI
a31207f : DO NOT MERGE: Ensure that unparcelling Region only reads the expected number of bytes
2545815 : Check that the parcel contained the expected amount of region data. DO NOT MERGE
8fba7e6 : Prevent insanely long passwords from crashing SystemUI
1e72dc7 : DO NOT MERGE: Ensure that unparcelling Region only reads the expected number of bytes
4cff1f4 : Check that the parcel contained the expected amount of region data. DO NOT MERGE
a0e574d : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.
d42d72c : Prevent system uid component from running in an app process
b481410 : Lockdown AM.getRunningAppProcesses API with permission.REAL_GET_TASKS
b7a79bd : DO NOT MERGE Don't take flags when creating app widget config activity.
54602ec : Make Bitmap_createFromParcel check the color count. DO NOT MERGE
a5e904e : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.
e3cde78 : Prevent system uid component from running in an app process
aaa0fee : Lockdown AM.getRunningAppProcesses API with permission.REAL_GET_TASKS
0b98d30 : DO NOT MERGE Don't take flags when creating app widget config activity.
d44e5bd : Make Bitmap_createFromParcel check the color count. DO NOT MERGE
0e40462 : Revert "DO NOT MERGE Backport of limited jank-tracking metrics"
d5a4a1a : DO NOT MERGE Backport of limited jank-tracking metrics
69f2910 : Fix incorrect condition for sub id check.
154c507 : Fix incorrect condition for sub id check.
4d0dd31 : Fix incorrect condition for sub id check.
15dc72e : Fix incorrect condition for sub id check.
a85714e : Fix incorrect condition for sub id check.
520c931 : Revert "Revert "Rename setGlobalPreferredNetworkType to setPreferredNetworkTypeToGlobal per API council.""
e241c8e : Revert "Rename setGlobalPreferredNetworkType to setPreferredNetworkTypeToGlobal per API council."
5022168 : GpsLocationProvider: Read data enabled status from TelephonyManager.
3c317fa : Fix colored icons in doze mode
2177ed5 : remove actions and calls for the old sms/mms api BUG: 18005911
f6419a0 : Revert "Allow home to be pressed while in incoming call screen"
ab26999 : Propagate DrawableContainer state on mutate, fix ColorDrawable theming
9c59a03 : Add global setting for ephemeral network timeout.
87c7f8c : Revert "Revert "Attempt to fix keyguard missing bug""
e886800 : Revert "Revert "Attempt to fix keyguard missing bug""
22f0695 : Fix auto-advance regression in radial time picker
08e1f64 : Push inet condition to new MobileSignalControllers
168c025 : Update dark mode when notification is updated
c137fe9 : Offer to "merge" subscribers for data usage.
1527911 : Don't send the same PendingIntent more than once.
8573710 : add disable Ephemeral Network API Bug:18525241
dd07989 : Don't forget to listen for USER_ALL broadcasts.
42b4602 : Ensure that loading and unloading of tasks happen symmetrically with lifecycle events. (Bug 18574950)
9a761b4 : Show "Connected via Wi-Fi assistant" for ephemeral networks.
30232fd : Fix flipped captive portal bit in network conditions bcast.
14b6950 : Doing provisioning check for wifi tethering from SystemUI
ce6b474 : Handle package changes in NetworkScoreService.
9f2c2b2 : Don't enforce control permission when preparing consented VPN.

+- Project: platform/frameworks/native

56710eb : Disregard alleged binder entities beyond parcel bounds
544b11d : Verify that the native handle was created
e68cbc3 : Disregard alleged binder entities beyond parcel bounds
7dcd0ec : Verify that the native handle was created

+- Project: platform/frameworks/opt/net/wifi

567f9b2 : Split untrusted NetworkFactory from regular one.
ca5deaa : Revert "Hack to work around NetworkFactory bug."
3b1c71f : Hack to work around NetworkFactory bug.
9d13dcf : Stabilize ephemeral connections in the face of new BSSIDs.
22fd791 : Hack to work around NetworkFactory bug.
6c82f99 : - keep track of ephemeral configurations that are deleted by user - make sure we cleaned up prior ephemeral WiFiconfiguration from wpa_supplicant.conf Bug:18525241
8c9fb52 : - dont loose explicitely selected bit when autojoining same network - use scorer only for untrusted networks Bug:18490330 Bug:18368125

+- Project: platform/frameworks/opt/telephony

a5c5024 : Externally-reported Moderate severity vulnerability in SMS: Apps can bypass the SMS short code notification prompt
df31d37 : Externally-reported Moderate severity vulnerability in SMS: Apps can bypass the SMS short code notification prompt
e5cb1de : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.
b485814 : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.
2c7234e : Log last 20 CAT proactive commands.
eea3164 : UICC: Handle card level REFRESH RESET events.
29913ad : DcTracker: Cleanup connections when IccRecords is destroyed.
97fd1e0 : Log last 20 CAT proactive commands.
ae01da3 : UICC: Handle card level REFRESH RESET events.
b21322b : DcTracker: Cleanup connections when IccRecords is destroyed.
45a2cc9 : Log last 20 CAT proactive commands.
5f3f4bb : UICC: Handle card level REFRESH RESET events.
d69bc8d : DcTracker: Cleanup connections when IccRecords is destroyed.
05d3365 : Log last 20 CAT proactive commands.
b963beb : UICC: Handle card level REFRESH RESET events.
a95110b : DcTracker: Cleanup connections when IccRecords is destroyed.
1a25df0 : Log last 20 CAT proactive commands.
210cd9a : UICC: Handle card level REFRESH RESET events.
d5a1f17 : DcTracker: Cleanup connections when IccRecords is destroyed.
8d1a3d1 : Revert "Remove special handling for length field."
7026d6c : Revert "Remove special handling for length field."
857a98f : Revert "Remove special handling for length field."
0a6f8a7 : Revert "Remove special handling for length field."
6e9744e : SmsSenderCallback: Run the callback with the phone UID.
3aa60e9 : Revert "Remove special handling for length field."
1c547b8 : Revert "Remove special handling for length field."
02728f4 : Revert "Remove special handling for length field."
4a51984 : Revert "Remove special handling for length field."
6785511 : Revert "Remove special handling for length field."
35062bd : Revert "Remove special handling for length field."
d6e5599 : Revert "Remove special handling for length field."
f022163 : Revert "Remove special handling for length field."
f93b6d7 : Revert "Remove special handling for length field."
fcf16b9 : Revert "Remove special handling for length field."
3c90862 : Revert "Remove special handling for length field."
96740d8 : Revert "Remove special handling for length field."
38522ee : Revert "Remove special handling for length field."
22b9ecc : Data roaming/enable settings should be per phone on a single SIM device.
3596ccf : Revert "Remove special handling for length field."
987378c : remove actions and calls for the old sms/mms api
2fa26c0 : Revert "Remove special handling for length field."
03473c0 : Revert "Remove special handling for length field."
5b62359 : Revert "Remove special handling for length field."
4f51eee : ProxyController.setRadioCability - do not throw exception on simultaneous requests.
feadd9f : Clear calling entity before deleting SMS from raw table. Deletion needs permissions of the phone process.
f7a618c : Splice subscriber identity into NetworkMisc.
5694fca : Revert "Remove special handling for length field."
1aa8e10 : getActiveSubscriptionInfoList used wrong slection operator.
cb8e7ab : Change to query ICC file handler directly from IccCard instead of from Phone obj.
c895066 : Revert "Remove special handling for length field."
3967db7 : CL to revert ag/575031 for nova
1ec1208 : Revert "Remove special handling for length field."
85bddb6 : Delete UiccCardApplication on recieving REFRESH_RESET for them.
577d008 : On IMSI change and CDMA mode, set automatic network selection if it is manual.
9762f91 : Delete UiccCardApplication on recieving REFRESH_RESET for them.
5d7d4cc : On IMSI change and CDMA mode, set automatic network selection if it is manual.

+- Project: platform/hardware/broadcom/wlan

9ff2f18 : net: wireless: bcmdhd Update bcm4354/56 FW(Lollipop-MR1-7.35.79.7)

+- Project: platform/hardware/qcom/audio

8bc4850 : hal: Fix EC not working in VoIP calls

+- Project: platform/hardware/qcom/gps

66b3250 : carrier configured GPS_LOCK value missed out

+- Project: platform/packages/apps/Bluetooth

014b90e : DO NOT MERGE Fix security vulnerabilities in permission of deleting MMS/SMS
ca20f50 : DO NOT MERGE Fix security vulnerabilities in permission of deleting MMS/SMS

+- Project: platform/packages/apps/Dialer

578934d : Fix voicemail playback position control
144d3bf : Fix voicemail playback position control
06d7d08 : Fix voicemail playback position control

+- Project: platform/packages/apps/InCallUI

e3675d6 : Revert "Allow back to be pressed while in incoming call screen"
1a85ee5 : Always animate drawables when given animations
247810f : Animate drawables if possible
fcc75d3 : Animate drawables if possible

+- Project: platform/packages/apps/Settings

2df2739 : Made the WPS icon visisble.
3eb693f : Made the WPS icon visisble.
35741d8 : SIM cards in Setting will only show on Multi-SIM devices
cb57895 : Offer to "merge" subscribers for data usage.
ec7dcd0 : Final platform settings UX for ephemeral networks.
15b3aca : Removing checks from EnableWifiTether which are done in SystemUI
f710de6 : Settings app - read phone number from TelephonyManager.

+- Project: platform/packages/apps/Stk

ea855a3 : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.
1d8e001 : DO NOT MERGE Change to add STK_PERMISSION for stk related commands.

+- Project: platform/packages/services/Mms

1dfb84d : Remove airplane mode and mobile data check for MMS request execution
87653d5 : Remove airplane mode and mobile data check for MMS request execution
3a900ca : Remove airplane mode and mobile data check for MMS request execution
c9bcb15 : Remove airplane mode and mobile data check for MMS request execution

+- Project: platform/packages/services/Telecomm

bfb7177 : Allow PSTN phone account for incoming calls from connection manager
c326f89 : Allow PSTN phone account for incoming calls from connection manager
93e1136 : Allow PSTN phone account for incoming calls from connection manager
a7f43ca : Allow PSTN phone account for incoming calls from connection manager
bbb6c5b : Allow PSTN phone account for incoming calls from connection manager

+- Project: platform/packages/services/Telephony

78ea785 : DO NOT MERGE Change to make STK related intents protected.
fcb1d13 : DO NOT MERGE Change to make STK related intents protected.
73fea4c : Derive "merged" subscribers based on line numbers.

+- Project: platform/prebuilts/sdk

5e10681 : remove actions and calls for the old sms/mms api BUG: 18005911

+- Project: platform/system/core

e0a1714 : libutils: fix overflow in String8::allocFromUTF8
2040543 : libutils: fix overflow in String8::allocFromUTF8
28a9f03 : libutils: fix overflow in SharedBuffer [DO NOT MERGE]
be20bb0 : Fix compile failure after rIfe1dc0791040150132bea6884f1e6c8d31972d1b
5490545 : libutils: fix overflow in SharedBuffer [DO NOT MERGE]
d32a1d2 : Fix compile failure after rIfe1dc0791040150132bea6884f1e6c8d31972d1b
db97552 : Prevent integer overflow when allocating native_handle_t
e8c62fb : Prevent integer overflow when allocating native_handle_t

+- Project: platform/system/security

3e8ea9a : Properly check for Blob max length
d4916a0 : Properly check for Blob max length
5c3f7e0 : Fix unchecked length in Blob creation
bb9f439 : Fix unchecked length in Blob creation