3 Commits
Author SHA1 Message Date
probaero b1e1c098c6 rosemary: Build bluetooth A2DP stack from source 2026-04-11 21:33:26 +07:00
Arianandprobaero a61b6fd7ac rosemary: Patch a few camera blobs to allocate GraphicBuffer with new size
Commit [1] ("Introduce a dependency monitor for fences") has added new
members to the GraphicBuffer struct, increasing the size from 0x100 to
0xd30. camera.xiaomi.so creates GraphicBuffer in its constructors using
"new GraphicBuffer(..)" which encodes the size to allocate at compile
time. Then, on destruction of the object, the implicit destructor will
try to destruct the new members, but, since this memory was not
allocated for the object, this leads to memory access of unallocated
storage.

F DEBUG   : backtrace:
F DEBUG   :       #00 pc 000000000003ba00  /vendor/lib64/libui.so (__aarch64_ldadd8_acq_rel+16) (BuildId: b577faa139eb3404c7d3a674b147634c)
F DEBUG   :       #01 pc 0000000000051364  /vendor/lib64/libui.so (android::GraphicBuffer::~GraphicBuffer()+248) (BuildId: b577faa139eb3404c7d3a674b147634c)
F DEBUG   :       #02 pc 0000000000051698  /vendor/lib64/libui.so (android::GraphicBuffer::~GraphicBuffer()+20) (BuildId: b577faa139eb3404c7d3a674b147634c)
F DEBUG   :       #03 pc 0000000000011064  /vendor/lib64/libutils.so (android::RefBase::decStrong(void const*) const+164) (BuildId: 99d1ab745e7b73420d8d2b397483ef54)
F DEBUG   :       #04 pc 00000000000cd538  /vendor/lib64/hw/camera.xiaomi.so (mihal::GraBuffer::~GraBuffer()+236) (BuildId: a4c59705588bd26d407f0ab181902baf)

[1]: https://github.com/LineageOS/android_frameworks_native/commit/df868baf2abefbb45341530d20a948ffd6b2c304

Change-Id: I239c31b6ea5a7813abc3e9cfbefb6d2bdcc1a9e0
Signed-off-by: therealmharc <therealmharc@gmail.com>
Signed-off-by: Ido <dev.xyzuniverse@gmail.com>
2026-04-11 21:30:48 +07:00
probaero 4c7d15345f rosemary: drop lfs config 2026-03-27 22:44:50 +07:00
9 changed files with 1 additions and 101 deletions
-3
View File
@@ -1,3 +0,0 @@
[lfs]
url = "https://lfs.undocumented.software/lfs/blobs.git/info/lfs"
pushurl = "ssh://git@lfs.undocumented.software/lfs/blobs.git"
+1 -96
View File
@@ -2046,102 +2046,6 @@ cc_prebuilt_library_shared {
soc_specific: true,
}
cc_prebuilt_library_shared {
name: "vendor.mediatek.hardware.bluetooth.audio@2.1",
owner: "xiaomi",
strip: {
none: true,
},
target: {
android_arm: {
srcs: [
"proprietary/vendor/lib/vendor.mediatek.hardware.bluetooth.audio@2.1.so",
],
shared_libs: [
"android.hardware.audio.common@5.0",
"android.hidl.safe_union@1.0",
"libhidlbase",
"liblog",
"libutils",
"libcutils",
"libc++",
"libc",
"libm",
"libdl",
],
},
android_arm64: {
srcs: [
"proprietary/vendor/lib64/vendor.mediatek.hardware.bluetooth.audio@2.1.so",
],
shared_libs: [
"android.hardware.audio.common@5.0",
"android.hidl.safe_union@1.0",
"libhidlbase",
"liblog",
"libutils",
"libcutils",
"libc++",
"libc",
"libm",
"libdl",
],
},
},
compile_multilib: "both",
prefer: true,
soc_specific: true,
}
cc_prebuilt_library_shared {
name: "vendor.mediatek.hardware.bluetooth.audio@2.2",
owner: "xiaomi",
strip: {
none: true,
},
target: {
android_arm: {
srcs: [
"proprietary/vendor/lib/vendor.mediatek.hardware.bluetooth.audio@2.2.so",
],
shared_libs: [
"android.hardware.audio.common@5.0",
"vendor.mediatek.hardware.bluetooth.audio@2.1",
"android.hidl.safe_union@1.0",
"libhidlbase",
"liblog",
"libutils",
"libcutils",
"libc++",
"libc",
"libm",
"libdl",
],
},
android_arm64: {
srcs: [
"proprietary/vendor/lib64/vendor.mediatek.hardware.bluetooth.audio@2.2.so",
],
shared_libs: [
"android.hardware.audio.common@5.0",
"vendor.mediatek.hardware.bluetooth.audio@2.1",
"android.hidl.safe_union@1.0",
"libhidlbase",
"liblog",
"libutils",
"libcutils",
"libc++",
"libc",
"libm",
"libdl",
],
},
},
compile_multilib: "both",
prefer: true,
soc_specific: true,
}
cc_prebuilt_library_shared {
name: "vendor.mediatek.hardware.nvram@1.0",
owner: "xiaomi",
@@ -21782,6 +21686,7 @@ cc_prebuilt_library_shared {
},
},
compile_multilib: "64",
check_elf_files: false,
prefer: true,
soc_specific: true,
}
Binary file not shown.
Binary file not shown.
-2
View File
@@ -610,8 +610,6 @@ PRODUCT_PACKAGES += \
libmtk_drvb \
vendor.mediatek.hardware.apmonitor@2.0 \
vendor.mediatek.hardware.apuware.utils@2.0 \
vendor.mediatek.hardware.bluetooth.audio@2.1 \
vendor.mediatek.hardware.bluetooth.audio@2.2 \
vendor.mediatek.hardware.nvram@1.0 \
vendor.mediatek.hardware.nvram@1.1 \
audio.primary.mt6785 \