bugfix: properly acquire package state from original package

This resolves the NPE crash when updating an application under the new
package name that initially had the original package as package name.

services/core/java/com/android/server/pm/InstallPackageHelper.java

@@ -1263,7 +1263,7 @@ private void preparePackageLI(InstallRequest request) throws PrepareFailure {
         boolean systemApp = false;
         boolean replace = false;
         synchronized (mPm.mLock) {
-            final PackageSetting ps = mPm.mSettings.getPackageLPr(pkgName);
+            PackageSetting ps = mPm.mSettings.getPackageLPr(pkgName);
             // Check if installing already existing package
             if ((installFlags & PackageManager.INSTALL_REPLACE_EXISTING) != 0) {
                 String oldName = mPm.mSettings.getRenamedPackageLPr(pkgName);
@@ -1276,6 +1276,7 @@ private void preparePackageLI(InstallRequest request) throws PrepareFailure {
                     parsedPackage.setPackageName(oldName);
                     pkgName = parsedPackage.getPackageName();
                     replace = true;
+                    ps = mPm.mSettings.getPackageLPr(pkgName);
                     if (DEBUG_INSTALL) {
                         Slog.d(TAG, "Replacing existing renamed package: oldName="
                                 + oldName + " pkgName=" + pkgName);