)]}'
{
  "commit": "5a7e0ff57a52e12f834d64c57d040d1105ea17f2",
  "tree": "e35968b46a31f1a9515ffd4b8b0462e5f4ec41b4",
  "parents": [
    "978360941fb89b8459a72a2da0a91b1d05d0ca1a"
  ],
  "author": {
    "name": "Tommi",
    "email": "tommi@webrtc.org",
    "time": "Mon May 18 06:36:02 2026"
  },
  "committer": {
    "name": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Wed May 27 08:59:57 2026"
  },
  "message": "[M149] Cap RTCConfiguration certificates and enforce 32-bit overflow checks\n\n1. Bounded the maximum number of certificates in RTCConfiguration to\n   1000 to prevent reference counter overflow while maintaining ample\n   headroom for legitimate multi-algorithm DTLS interoperability.\n2. Updated webrtc_impl::RefCounter to declare IncRef() out-of-line\n   unconditionally across all architectures.\n3. Implemented RefCounter::IncRef() out-of-line in ref_counter.cc with\n   an explicit RTC_CHECK_LT(prev, INT_MAX) guard on all architectures,\n   preventing 32-bit integer overflow and Use-After-Free vulnerabilities\n   unconditionally without causing inlined binary bloat.\n\n(cherry picked from commit 34505048c030ee72ad6ee99f46534861ebb0e365)\n\nBug: chromium:513154132\nFixed: chromium:513154132, chromium:514928807\nChange-Id: I9894ef08519423b24139b0250cc9da0f9737827a\nReviewed-on: https://webrtc-review.googlesource.com/c/src/+/472722\nCommit-Queue: Tomas Gunnarsson \u003ctommi@webrtc.org\u003e\nReviewed-by: Harald Alvestrand \u003chta@webrtc.org\u003e\nCr-Original-Commit-Position: refs/heads/main@{#47722}\nReviewed-on: https://webrtc-review.googlesource.com/c/src/+/475720\nReviewed-by: Danil Chapovalov \u003cdanilchap@webrtc.org\u003e\nCr-Commit-Position: refs/branch-heads/7827@{#4}\nCr-Branched-From: d606bc991592fbf4dcbe85e9d05db5e501a5ad42-refs/heads/main@{#47595}\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "dc2834a748f90497e2c87bcde0a684c56c7e393e",
      "old_mode": 33188,
      "old_path": "api/peer_connection_interface.h",
      "new_id": "f59ebbd9b564cd6d342a1e889c33d518c2a06a70",
      "new_mode": 33188,
      "new_path": "api/peer_connection_interface.h"
    },
    {
      "type": "modify",
      "old_id": "d36b7664040ad245af278b2b046fd76cb04ae8d6",
      "old_mode": 33188,
      "old_path": "pc/peer_connection_factory.cc",
      "new_id": "9e9e402b1d7978457e9b68030a757934c414490e",
      "new_mode": 33188,
      "new_path": "pc/peer_connection_factory.cc"
    },
    {
      "type": "modify",
      "old_id": "15a55bdb3a4477369e7884f531c7959585024b39",
      "old_mode": 33188,
      "old_path": "rtc_base/BUILD.gn",
      "new_id": "0ee263448792484249b935f5a2f40ccf2c934cf9",
      "new_mode": 33188,
      "new_path": "rtc_base/BUILD.gn"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "bc3c6a765b52c45d29d46e7d6b37cb84568d130b",
      "new_mode": 33188,
      "new_path": "rtc_base/ref_counter.cc"
    },
    {
      "type": "modify",
      "old_id": "af253914b43cc8bbaeb48b79a8bb7068df26bd2c",
      "old_mode": 33188,
      "old_path": "rtc_base/ref_counter.h",
      "new_id": "6e52e4ef547807963414da0c385fdb4fc8e57f94",
      "new_mode": 33188,
      "new_path": "rtc_base/ref_counter.h"
    }
  ]
}