tree 22ef263f4b14c95f2328f0532e23307efdac1b15
parent 4d60c2dbcf7c5cb6fcb61585ceba8e26b7812644
author Gohulan Balachandran <gohulanb@quicinc.com> 1508517472 -0700
committer Stricted <info@stricted.net> 1540345749 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
 iQIcBAABCAAGBQJbz8+VAAoJED5Fu5X3rTPaF8UQAIkNlvECM5A2lNWPW39ODXUv
 GKcw5KqOJvecVykhdB0pfRVtySrMCGAFMwriG7fTTWiZQ14aboKJoqBQE/XNokXk
 Xtaay9z+FO5+FVNMg6wfE9XAK0JSZovfR4s5c6IeD+1jr8aeEJJKq7CGk3qd5p9T
 KmU9TfU0/TW8cUKTQwI9mx+gJ2XDwJOGZvjvEMhON3ct0Ar7/2X6daser4QhE4Zj
 a5y+bdCmnG8xSa0b99pFur2Xj+QTJSTEMkJaZdWzJorX9PZZmcIdR2borAQOpE1t
 DAnSP6Ni1M7H37AZ0NeT9CJJF0Fjw7wBZ+Zo0fcrU99gd4M2S5rPsZIEaC+IKVkZ
 pw6+elZ2+qyQq1bSVe7oi8r0bzpHndhKemRYd30bjndpQFsdNVibdXyYkCdvr2/r
 XFRYw28/OaLR1rwR1uNBq9Y9oXZIX8M69s57amPO9ZU8jbGwKv0HTntd+jc9uOff
 fOBWtY2v796OeIwIgk8e1zyAGwLrgrTgIfTRIQ1Wf6ukOmC3GKzOpt29gGeEV7KJ
 D08J+uAPpoVjg7aU7S+QhS0lole+S/gFC4ylFtOuR5QF6P1avS0Pt3cqfxZO/JuA
 aIkPn0ThZunvpnlpqUoFKq/pUKa1pO575T+i6AiKbi0lSpUKubWHB8Q46ObRVJ1L
 5QEBoq8lrXSvNctXD1jJ
 =jkMR
 -----END PGP SIGNATURE-----

libril: Fix double freeing of memory in SAP
 service and add null-checks.

The payload of a SAP request could be freed twice in certain scenarios.
Also, add null-checks to prevent dereferencing of null pointers.

Bug: 64729356
Test: Manually run the fuzz tests and ensure that there is no crash in
      rild

Change-Id: Ib7ae269fa5297d6acea267337b220b8858c82bae