Null pointer dereference

cmds/servicemanager/servicemanager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service NULL pointer dereference, or out-of-bounds write via vectors related to binder passed lengths...