Fix read-after-free in matroska_read_seek().
authorXiaohan Wang <xhwang@chromium.org>
Thu, 6 Nov 2014 20:59:54 +0000 (12:59 -0800)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 8 Nov 2014 00:33:13 +0000 (01:33 +0100)
commit33301f001747d7a542073c634cc81da5eff051cf
treeb7087d45b9ea3e2acf166d192f3b8bd22578a95b
parentc9a9a7a1fd7e00a838a94e3792235ceb4755648c
Fix read-after-free in matroska_read_seek().

In matroska_read_seek(), |tracks| is assigned at the begining of the function.
However, functions like matroska_parse_cues() could reallocate the tracks so
that |tracks| can get invalidated.

This CL assigns |tracks| only before we use it so that it won't be invalidated.

BUG=427266
TEST=Test case in associated bug passes now.

Change-Id: I9c7065fe8f4311ca846076281df2282d190ed344

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavformat/matroskadec.c