• Xiaohan Wang's avatar
    Fix read-after-free in matroska_read_seek(). · 33301f00
    Xiaohan Wang authored
    In matroska_read_seek(), |tracks| is assigned at the begining of the function.
    However, functions like matroska_parse_cues() could reallocate the tracks so
    that |tracks| can get invalidated.
    
    This CL assigns |tracks| only before we use it so that it won't be invalidated.
    
    BUG=427266
    TEST=Test case in associated bug passes now.
    
    Change-Id: I9c7065fe8f4311ca846076281df2282d190ed344
    Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
    33301f00
matroskadec.c 120 KB