[Nexus 5 Android Development] dcrin3:
Build is based on aosp _r13 then the changes were added on top.

AOSP Userdebug build. Barebones, no gapps, as Stock as it gets.

Stagefright fixes & Serialization(_r13) vuln.

This is using the latest Nexus 5 GSM/LTE Binaries(LMY48I).

On android-5.1.1_r13 stagefright issues were addressed but it turns out the issues persisted.

( www.theregister.co.uk/2015/08/13/stagefright_patch_needs_repatch/ )

( https://blog.exodusintel.com/2015/08/13/stagefright-mission-accomplished/ )

================================================================================

The workaround

----------------

The fixes here:

https://android.googlesource.com/platform/frameworks/av/+/e1d095fa8bbb0d944722ce93d54962d1efb84a6f

---------------

also directly here

https://android.googlesource.com/pl...4717852eeb9eaa567990af14b7b4116e2d682f7^!/#F0

================================================================================

https://securityintelligence.com/on...derprivileged-apps-super-status/#.Vc5OmkfYLp4

Android Serialization Vulnerability -- This was fixed in _r13

All I found was this for Aug. 10: https://android-review.googlesource.com/#/q/OpenSSLX509Certificate

https://android.googlesource.com/platform/external/conscrypt/+/android-5.1.1_r13

and more directly(line 29 and beyond): https://android.googlesource.com/pl...org/conscrypt/OpenSSLX509CertificateTest.java

================================================================================

Assuming you have latest to date bootloader and radio flashed. *** MIND YOUR BACKUP ***

There are two files.

-First file is a tar.gz compressed file of all .img files(recovery,boot,system,cache,userdata). In a way how factory images arrive from googly.

You probably just need system and userdata. Maybe just system only.

https://drive.google.com/file/d/0B40LbZmgIl09aEUwZ3hDdlhWcXc/view?usp=sharing

--- hammerhead-LVY48E-stage2.tar.gz - 211.6MB ---

-------------------

-Second file is a ota package flashable via twrp. Factory wipe might be necessary.

Since I'm running AOSP right now, a google source build, All I do is go to twrp and flash the otapackage on top. ** Of course, mind your gapps. **

https://drive.google.com/file/d/0B40LbZmgIl09TnQ1Tm1mV2Y0LVU/view?usp=sharing

--- aosp_hammerhead-ota-eng.soilandwater.zip - 203MB ---

================================================================================

This is a AOSP 'userdebug' build. You have adb root access. The rest can be done with Super-SU 2.46 via twrp.

===============================================================================

Platform Tools(adb,fastboot) and Extras(USB Drivers)

https://drive.google.com/file/d/0B40LbZmgIl09clFleGZ0dUJDckU/view?usp=sharing

[IMG="detector results"]http://i.imgur.com/7Mwj7a2.png[/IMG]

soilandwater@fireNstone:~/workingDir$ lunch aosp_hammerhead-userdebug

============================================

PLATFORM_VERSION_CODENAME=REL

PLATFORM_VERSION=5.1.1

TARGET_PRODUCT=aosp_hammerhead

TARGET_BUILD_VARIANT=userdebug

TARGET_BUILD_TYPE=release

TARGET_BUILD_APPS=

TARGET_ARCH=arm

TARGET_ARCH_VARIANT=armv7-a-neon

TARGET_CPU_VARIANT=krait

TARGET_2ND_ARCH=

TARGET_2ND_ARCH_VARIANT=

TARGET_2ND_CPU_VARIANT=

HOST_ARCH=x86_64

HOST_OS=linux

HOST_OS_EXTRA=Linux-3.16.0-45-generic-x86_64-with-Ubuntu-14.04-trusty

HOST_BUILD_TYPE=release

BUILD_ID=LVY48E

OUT_DIR=out

============================================

thanks to cirwl from cm