fix: V-001 security vulnerability

Automated security fix generated by Orbis Security AI

Author: orbisai0security

qdl.c

@@ -251,6 +251,8 @@ static int decode_programmer_archive(struct sahara_image *blob, struct sahara_im
 			images[id].name = strdup(tok);
 		images[id].len = filesize;
 		images[id].ptr = malloc(filesize);
+		if (!images[id].ptr)
+			goto err;
 		memcpy(images[id].ptr, ptr, filesize);
 
 		ptr += filesize;
@@ -377,6 +379,7 @@ int decode_sahara_config(struct sahara_image *blob, struct sahara_image *images,
 
 	xmlFreeDoc(doc);
 	free(blob_name_buf);
+	blob_name_buf = NULL;
 
 	free(blob->ptr);
 	blob->ptr = NULL;