)]}'
{
  "commit": "34505048c030ee72ad6ee99f46534861ebb0e365",
  "tree": "8c4996bdb0285acf33523faa7969b400cbd1c0d0",
  "parents": [
    "113297322fa29a39fc42841dc24d9f6a304e4039"
  ],
  "author": {
    "name": "Tommi",
    "email": "tommi@webrtc.org",
    "time": "Mon May 18 06:36:02 2026"
  },
  "committer": {
    "name": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Mon May 18 07:22:35 2026"
  },
  "message": "Cap RTCConfiguration certificates and enforce 32-bit overflow checks\n\n1. Bounded the maximum number of certificates in RTCConfiguration to\n   1000 to prevent reference counter overflow while maintaining ample\n   headroom for legitimate multi-algorithm DTLS interoperability.\n2. Updated webrtc_impl::RefCounter to declare IncRef() out-of-line\n   unconditionally across all architectures.\n3. Implemented RefCounter::IncRef() out-of-line in ref_counter.cc with\n   an explicit RTC_CHECK_LT(prev, INT_MAX) guard on all architectures,\n   preventing 32-bit integer overflow and Use-After-Free vulnerabilities\n   unconditionally without causing inlined binary bloat.\n\nBug: chromium:513154132\nFixed: chromium:513154132\nChange-Id: I9894ef08519423b24139b0250cc9da0f9737827a\nReviewed-on: https://webrtc-review.googlesource.com/c/src/+/472722\nCommit-Queue: Tomas Gunnarsson \u003ctommi@webrtc.org\u003e\nReviewed-by: Harald Alvestrand \u003chta@webrtc.org\u003e\nCr-Commit-Position: refs/heads/main@{#47722}\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6c51d771947414aa6b88f2a64d93a121543a1fbb",
      "old_mode": 33188,
      "old_path": "api/peer_connection_interface.h",
      "new_id": "da0f292861d2d2155663b71631d83c1a963d57b5",
      "new_mode": 33188,
      "new_path": "api/peer_connection_interface.h"
    },
    {
      "type": "modify",
      "old_id": "d36b7664040ad245af278b2b046fd76cb04ae8d6",
      "old_mode": 33188,
      "old_path": "pc/peer_connection_factory.cc",
      "new_id": "9e9e402b1d7978457e9b68030a757934c414490e",
      "new_mode": 33188,
      "new_path": "pc/peer_connection_factory.cc"
    },
    {
      "type": "modify",
      "old_id": "f15668069d093b6a9f2c87aa1bc09d3198585a05",
      "old_mode": 33188,
      "old_path": "rtc_base/BUILD.gn",
      "new_id": "5a306a6bb5e8880b9736d7de82a099e6b83f7f5e",
      "new_mode": 33188,
      "new_path": "rtc_base/BUILD.gn"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "bc3c6a765b52c45d29d46e7d6b37cb84568d130b",
      "new_mode": 33188,
      "new_path": "rtc_base/ref_counter.cc"
    },
    {
      "type": "modify",
      "old_id": "af253914b43cc8bbaeb48b79a8bb7068df26bd2c",
      "old_mode": 33188,
      "old_path": "rtc_base/ref_counter.h",
      "new_id": "6e52e4ef547807963414da0c385fdb4fc8e57f94",
      "new_mode": 33188,
      "new_path": "rtc_base/ref_counter.h"
    }
  ]
}