fix: double free of the new name on a late rename failure

After the destination name buffers are assigned to fromdentry, a later
failure (e.g. fs_add_key_to_hash_table) reached out_free, which freed
those same buffers because ret < 0 — leaving fromdentry with dangling
name/platform_safe_name pointers that are freed again when the dentry is
disposed. Clear the locals once ownership moves to fromdentry.

Author: matejk

src/libltfs/ltfs_fsops.c

@@ -868,6 +868,10 @@ int ltfs_fsops_rename(const char *from, const char *to, ltfs_file_id *id, struct
 	fromdentry->name.percent_encode = fs_is_percent_encode_required(fromdentry->name.name);
 	fromdentry->platform_safe_name = to_filename_copy2;
 	fromdentry->matches_name_criteria = index_criteria_match(fromdentry, vol);
+	/* Ownership of both buffers has moved to fromdentry; clear the locals so
+	 * the out_free path does not free them again if a later step fails. */
+	to_filename_copy = NULL;
+	to_filename_copy2 = NULL;
 
 	/* Add fromdentry to new directory */
 	todir->child_list = fs_add_key_to_hash_table(todir->child_list, fromdentry, &ret);