app: guard VideoSink.submit against torn-down codec

reconfigure() tears the codec down outside the lock, so an in-flight
MediaCodec callback can reach submit() while `codec` is null. The NPE
lands on the callback handler thread, which has no catch and kills
the process. Drop the frame instead, like any back-pressure casualty.

Also rewrite the back-pressure comment: it described a keyframe-aware
drop policy this class cannot implement (the keyframe flag never
reaches it). The real policy protects config frames only.

0 files changed, 0 insertions, 0 deletions