SECURITY UPDATE: double free when growing the bit writer fails
debian/patches/CVE-2020-22219.patch: add nofree variants of the
safe_realloc helpers and use them where the caller keeps its own
pointer on failure, so bitwriter_grow() no longer leaves a freed
bw->buffer for FLAC__bitwriter_free() to release again
(upstream 21fe95ee82).