Code:  const CuePoint* Cues::GetNext(const CuePoint* pCurr) const {
  if (pCurr == NULL)
     return NULL;
 
  assert(pCurr->GetTimeCode() >= 0);
  assert(m_cue_points);
  assert(m_count >= 1);
#if 0
    const size_t count = m_count + m_preload_count;
    size_t index = pCurr->m_index;
    assert(index < count);
    CuePoint* const* const pp = m_cue_points;
    assert(pp);
    assert(pp[index] == pCurr);
    ++index;
    if (index >= count)
        return NULL;
    CuePoint* const pNext = pp[index];
    assert(pNext);
    pNext->Load(m_pSegment->m_pReader);
#else
  long index = pCurr->m_index;
  assert(index < m_count);
   CuePoint* const* const pp = m_cue_points;
  assert(pp);
  assert(pp[index] == pCurr);
 
   ++index;
 
 if (index >= m_count)

     return NULL;
 
   CuePoint* const pNext = pp[index];
  assert(pNext);
  assert(pNext->GetTimeCode() >= 0);
#endif
 
   return pNext;
 }

Vulnerability Type: DoS Exec Code Mem. Corr. 
CWE ID: CWE-20
Summary: libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.
Commit Message: external/libvpx/libwebm: Update snapshot

Update libwebm snapshot. This update contains security fixes from upstream.

Upstream git hash: 229f49347d19b0ca0941e072b199a242ef6c5f2b

BUG=23167726

Change-Id: Id3e140e7b31ae11294724b1ecfe2e9c83b4d4207
(cherry picked from commit d0281a15b3c6bd91756e453cc9398c5ef412d99a)
