[Verizon Samsung Galaxy Note II] Charlie R.:
Stagefright libraries

None of the CVEs reported by the Stagefright detector app have any technical details (some are just "reserved" for future publication).

However, the stagefright exploits are advertised as video-related. Bearing that in mind, I decided to set null permission on all the stagefright video codecs (mpeg4 and h.264) in addition to previously setting all build.prop stagefright entries to false.

This has not impacted the scanner. I'm temped to set null permissions on all these libraries, but I should probably try that on a spare.

u0_a252@t0ltevzw:/ $ su -

root@t0ltevzw:/ # mount -o remount,rw /system

root@t0ltevzw:/ # cd /system/lib

root@t0ltevzw:/system/lib # ls -l libstagefright*

-rw-r--r-- root root 1383864 2008-08-01 07:00 libstagefright.so

-rw-r--r-- root root 50232 2008-08-01 07:00 libstagefright_amrnb_common.so

-rw-r--r-- root root 21508 2008-08-01 07:00 libstagefright_avc_common.so

-rw-r--r-- root root 54488 2008-08-01 07:00 libstagefright_chromium_http.so

-rw-r--r-- root root 5128 2008-08-01 07:00 libstagefright_enc_common.so

-rw-r--r-- root root 70864 2008-08-01 07:00 libstagefright_foundation.so

-rw-r--r-- root root 107680 2008-08-01 07:00 libstagefright_httplive.so

-rw-r--r-- root root 115992 2008-08-01 07:00 libstagefright_omx.so

-rw-r--r-- root root 222636 2008-08-01 07:00 libstagefright_soft_aacdec.so

-rw-r--r-- root root 275628 2008-08-01 07:00 libstagefright_soft_aacenc.so

-rw-r--r-- root root 91312 2008-08-01 07:00 libstagefright_soft_amrdec.so

-rw-r--r-- root root 58480 2008-08-01 07:00 libstagefright_soft_amrnbenc.so

-rw-r--r-- root root 118380 2008-08-01 07:00 libstagefright_soft_amrwbenc.so

-rw-r--r-- root root 129248 2008-08-01 07:00 libstagefright_soft_flacenc.so

-rw-r--r-- root root 13372 2008-08-01 07:00 libstagefright_soft_g711dec.so

-rw-r--r-- root root 25812 2008-08-01 07:00 libstagefright_soft_gsmdec.so

-rw-r--r-- root root 111932 2008-08-01 07:00 libstagefright_soft_h264dec.so

-rw-r--r-- root root 91248 2008-08-01 07:00 libstagefright_soft_h264enc.so

-rw-r--r-- root root 62576 2008-08-01 07:00 libstagefright_soft_mp3dec.so

-rw-r--r-- root root 87152 2008-08-01 07:00 libstagefright_soft_mpeg4dec.so

-rw-r--r-- root root 119920 2008-08-01 07:00 libstagefright_soft_mpeg4enc.so

-rw-r--r-- root root 13372 2008-08-01 07:00 libstagefright_soft_rawdec.so

-rw-r--r-- root root 17468 2008-08-01 07:00 libstagefright_soft_vorbisdec.so

-rw-r--r-- root root 197880 2008-08-01 07:00 libstagefright_soft_vpxdec.so

-rw-r--r-- root root 234712 2008-08-01 07:00 libstagefright_soft_vpxenc.so

-rw-r--r-- root root 222416 2008-08-01 07:00 libstagefright_wfd.so

-rw-r--r-- root root 9272 2008-08-01 07:00 libstagefright_yuv.so

-rw-r--r-- root root 5228 2008-08-01 07:00 libstagefrighthw.so

root@t0ltevzw:/system/lib # chmod 000 libstagefright_soft_mpeg4*

root@t0ltevzw:/system/lib # chmod 000 libstagefright_soft_h264*

root@t0ltevzw:/system/lib # ls -l libstagefright_soft_mpeg* libstagefright_soft_h264*

---------- root root 87152 2008-08-01 07:00 libstagefright_soft_mpeg4dec.so

---------- root root 119920 2008-08-01 07:00 libstagefright_soft_mpeg4enc.so

---------- root root 111932 2008-08-01 07:00 libstagefright_soft_h264dec.so

---------- root root 91248 2008-08-01 07:00 libstagefright_soft_h264enc.so

root@t0ltevzw:/system/lib # cd /

root@t0ltevzw:/ # mount -o remount,ro /system

root@t0ltevzw:/ # exit

---------- Post added at 10:15 AM ---------- Previous post was at 09:53 AM ----------

It seems that the Alliance camera (which is some camera provided by Samsung) does not use one of the Stagefright video encoders above, since it is still working after a reboot.

---------- Post added at 10:17 AM ---------- Previous post was at 10:15 AM ----------

vpx is webm. That's gotta go too. I'll get it later.