[ROM] AOSP-USERDEBUG[android-5.1.1_r13]-[LVY48E][Aug 14]--STAGEFRIGHT II Addressed.

Build is based on aosp _r13 then the changes were added on top.
AOSP Userdebug build. Barebones, no gapps. Stagefright II fixes & Serialization(_r13) vuln.
This is using the latest Nexus 5 GSM/LTE Binaries(LMY48I).

On android-5.1.1_r13 stagefright issues were addressed but it turns out the issues persisted.
( http://www.theregister.co.uk/2015/08...needs_repatch/ )
( https://blog.exodusintel.com/2015/08...-accomplished/ )
================================================== ==============================
The workaround
----------------
The fixes here:
https://android.googlesource.com/pla...4962d1efb84a6f
---------------
also directly here
https://android.googlesource.com/pla...82f7%5E%21/#F0

================================================== ==============================
https://securityintelligence.com/one.../#.Vc5OmkfYLp4

Android Serialization Vulnerability -- This was fixed in _r13

All I found was this for Aug. 10: https://android-review.googlesource....509Certificate

https://android.googlesource.com/pla...roid-5.1.1_r13

and more directly(line 29 and beyond): https://android.googlesource.com/pla...icateTest.java

================================================== ==============================

Assuming you have latest to date bootloader and radio flashed. *** MIND YOUR BACKUP ***

There are two files.

-First file is a tar.gz compressed file of all .img files(recovery,boot,system,cache,userdata). In a way how factory images arrive from googly.
You probably just need system and userdata. Maybe just system only.
https://drive.google.com/file/d/0B40...ew?usp=sharing
--- hammerhead-LVY48E-stage2.tar.gz - 211.6MB ---
-------------------

-Second file is a ota package flashable via twrp. Factory wipe might be necessary.
Since I'm running AOSP right now, a google source build, All I do is go to twrp and flash the otapackage on top. ** Of course, mind your gapps. **
https://drive.google.com/file/d/0B40...ew?usp=sharing
--- aosp_hammerhead-ota-eng.soilandwater.zip - 203MB ---
================================================== ==============================
This is a AOSP 'userdebug' build. You have adb root access. The rest can be done with Super-SU 2.46 via twrp.
================================================== =============================

Platform Tools(adb,fastboot) and Extras(USB Drivers)
https://drive.google.com/file/d/0B40...ew?usp=sharing



soilandwater@fireNstone:~/workingDir$ lunch aosp_hammerhead-userdebug

============================================
PLATFORM_VERSION_CODENAME=REL
PLATFORM_VERSION=5.1.1
TARGET_PRODUCT=aosp_hammerhead
TARGET_BUILD_VARIANT=userdebug
TARGET_BUILD_TYPE=release
TARGET_BUILD_APPS=
TARGET_ARCH=arm
TARGET_ARCH_VARIANT=armv7-a-neon
TARGET_CPU_VARIANT=krait
TARGET_2ND_ARCH=
TARGET_2ND_ARCH_VARIANT=
TARGET_2ND_CPU_VARIANT=
HOST_ARCH=x86_64
HOST_OS=linux
HOST_OS_EXTRA=Linux-3.16.0-45-generic-x86_64-with-Ubuntu-14.04-trusty
HOST_BUILD_TYPE=release
BUILD_ID=LVY48E
OUT_DIR=out
============================================

thanks to cirwl from cm