The Bearer Context Modification Request test is adding 1 QoS Flow, therefore the encoding/decoding is done and this bug does not show. The issue is there when no QoS Flow is mapped in the DRBnGRanModList, therefore when no memory is allocated for the optional IE, and the member is accessed in the decoding of the Flow Mapping Information.