libavformat/mpegts.c:682: error: Null Dereference
  pointer `&gb->buffer` last assigned on line 677 could be null and is dereferenced by call to `get_bits1()` at line 682, column 23.

libavformat/mpegts.c:670:1: start of procedure read_sl_header()
668. }
669. 
670. static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)
     ^
671. {
672.     GetBitContext gb;

libavformat/mpegts.c:673:5: 
671. {
672.     GetBitContext gb;
673.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
         ^
674.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
675.     int dts_flag = -1, cts_flag = -1;

libavformat/mpegts.c:674:5: 
672.     GetBitContext gb;
673.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
674.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
         ^
675.     int dts_flag = -1, cts_flag = -1;
676.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;

libavformat/mpegts.c:675:5: 
673.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
674.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
675.     int dts_flag = -1, cts_flag = -1;
         ^
676.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
677.     init_get_bits(&gb, buf, buf_size*8);

libavformat/mpegts.c:676:5: 
674.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
675.     int dts_flag = -1, cts_flag = -1;
676.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
         ^
677.     init_get_bits(&gb, buf, buf_size*8);
678. 

libavformat/mpegts.c:677:5: 
675.     int dts_flag = -1, cts_flag = -1;
676.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
677.     init_get_bits(&gb, buf, buf_size*8);
         ^
678. 
679.     if (sl->use_au_start)

libavcodec/get_bits.h:375:1: start of procedure init_get_bits()
  373.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
  374.  */
  375. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  376.                                 int bit_size)
  377. {

libavcodec/get_bits.h:379:5: 
  377. {
  378.     int buffer_size;
  379.     int ret = 0;
           ^
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {

libavcodec/get_bits.h:381:9: Taking true branch
  379.     int ret = 0;
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
               ^
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;

libavcodec/get_bits.h:382:9: 
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
  382.         buffer_size = bit_size = 0;
               ^
  383.         buffer      = NULL;
  384.         ret         = AVERROR_INVALIDDATA;

libavcodec/get_bits.h:383:9: 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;
               ^
  384.         ret         = AVERROR_INVALIDDATA;
  385.     }

libavcodec/get_bits.h:384:9: 
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;
  384.         ret         = AVERROR_INVALIDDATA;
               ^
  385.     }
  386. 

libavcodec/get_bits.h:387:5: 
  385.     }
  386. 
  387.     buffer_size = (bit_size + 7) >> 3;
           ^
  388. 
  389.     s->buffer             = buffer;

libavcodec/get_bits.h:389:5: 
  387.     buffer_size = (bit_size + 7) >> 3;
  388. 
  389.     s->buffer             = buffer;
           ^
  390.     s->size_in_bits       = bit_size;
  391. #if !UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:390:5: 
  388. 
  389.     s->buffer             = buffer;
  390.     s->size_in_bits       = bit_size;
           ^
  391. #if !UNCHECKED_BITSTREAM_READER
  392.     s->size_in_bits_plus8 = bit_size + 8;

libavcodec/get_bits.h:392:5: 
  390.     s->size_in_bits       = bit_size;
  391. #if !UNCHECKED_BITSTREAM_READER
  392.     s->size_in_bits_plus8 = bit_size + 8;
           ^
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;

libavcodec/get_bits.h:394:5: 
  392.     s->size_in_bits_plus8 = bit_size + 8;
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;
           ^
  395.     s->index              = 0;
  396. 

libavcodec/get_bits.h:395:5: 
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;
  395.     s->index              = 0;
           ^
  396. 
  397.     return ret;

libavcodec/get_bits.h:397:5: 
  395.     s->index              = 0;
  396. 
  397.     return ret;
           ^
  398. }
  399. 

libavcodec/get_bits.h:398:1: return from a call to init_get_bits
  396. 
  397.     return ret;
  398. }
       ^
  399. 
  400. /**

libavformat/mpegts.c:679:9: Taking false branch
677.     init_get_bits(&gb, buf, buf_size*8);
678. 
679.     if (sl->use_au_start)
             ^
680.         au_start_flag = get_bits1(&gb);
681.     if (sl->use_au_end)

libavformat/mpegts.c:681:9: Taking true branch
679.     if (sl->use_au_start)
680.         au_start_flag = get_bits1(&gb);
681.     if (sl->use_au_end)
             ^
682.         au_end_flag = get_bits1(&gb);
683.     if (!sl->use_au_start && !sl->use_au_end)

libavformat/mpegts.c:682:9: 
680.         au_start_flag = get_bits1(&gb);
681.     if (sl->use_au_end)
682.         au_end_flag = get_bits1(&gb);
             ^
683.     if (!sl->use_au_start && !sl->use_au_end)
684.         au_start_flag = au_end_flag = 1;

libavcodec/get_bits.h:271:1: start of procedure get_bits1()
  269. }
  270. 
  271. static inline unsigned int get_bits1(GetBitContext *s)
       ^
  272. {
  273.     unsigned int index = s->index;

libavcodec/get_bits.h:273:5: 
  271. static inline unsigned int get_bits1(GetBitContext *s)
  272. {
  273.     unsigned int index = s->index;
           ^
  274.     uint8_t result     = s->buffer[index >> 3];
  275. #ifdef BITSTREAM_READER_LE

libavcodec/get_bits.h:274:5: 
  272. {
  273.     unsigned int index = s->index;
  274.     uint8_t result     = s->buffer[index >> 3];
           ^
  275. #ifdef BITSTREAM_READER_LE
  276.     result >>= index & 7;

static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)
{
    GetBitContext gb;
    int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
    int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
    int dts_flag = -1, cts_flag = -1;
    int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
    init_get_bits(&gb, buf, buf_size*8);
    if (sl->use_au_start)
        au_start_flag = get_bits1(&gb);
    if (sl->use_au_end)
        au_end_flag = get_bits1(&gb);
    if (!sl->use_au_start && !sl->use_au_end)
        au_start_flag = au_end_flag = 1;
    if (sl->ocr_len > 0)
        ocr_flag = get_bits1(&gb);
    if (sl->use_idle)
        idle_flag = get_bits1(&gb);
    if (sl->use_padding)
        padding_flag = get_bits1(&gb);
    if (padding_flag)
        padding_bits = get_bits(&gb, 3);
    if (!idle_flag && (!padding_flag || padding_bits != 0)) {
        if (sl->packet_seq_num_len)
            skip_bits_long(&gb, sl->packet_seq_num_len);
        if (sl->degr_prior_len)
            if (get_bits1(&gb))
                skip_bits(&gb, sl->degr_prior_len);
        if (ocr_flag)
            skip_bits_long(&gb, sl->ocr_len);
        if (au_start_flag) {
            if (sl->use_rand_acc_pt)
                get_bits1(&gb);
            if (sl->au_seq_num_len > 0)
                skip_bits_long(&gb, sl->au_seq_num_len);
            if (sl->use_timestamps) {
                dts_flag = get_bits1(&gb);
                cts_flag = get_bits1(&gb);
            }
        }
        if (sl->inst_bitrate_len)
            inst_bitrate_flag = get_bits1(&gb);
        if (dts_flag == 1)
            dts = get_bits64(&gb, sl->timestamp_len);
        if (cts_flag == 1)
            cts = get_bits64(&gb, sl->timestamp_len);
        if (sl->au_len > 0)
            skip_bits_long(&gb, sl->au_len);
        if (inst_bitrate_flag)
            skip_bits_long(&gb, sl->inst_bitrate_len);
    }
    if (dts != AV_NOPTS_VALUE)
        pes->dts = dts;
    if (cts != AV_NOPTS_VALUE)
        pes->pts = cts;
    if (sl->timestamp_len && sl->timestamp_res)
        avpriv_set_pts_info(pes->st, sl->timestamp_len, 1, sl->timestamp_res);
    return (get_bits_count(&gb) + 7) >> 3;
}
['static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)\n{\n    GetBitContext gb;\n    int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;\n    int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;\n    int dts_flag = -1, cts_flag = -1;\n    int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;\n    init_get_bits(&gb, buf, buf_size*8);\n    if (sl->use_au_start)\n        au_start_flag = get_bits1(&gb);\n    if (sl->use_au_end)\n        au_end_flag = get_bits1(&gb);\n    if (!sl->use_au_start && !sl->use_au_end)\n        au_start_flag = au_end_flag = 1;\n    if (sl->ocr_len > 0)\n        ocr_flag = get_bits1(&gb);\n    if (sl->use_idle)\n        idle_flag = get_bits1(&gb);\n    if (sl->use_padding)\n        padding_flag = get_bits1(&gb);\n    if (padding_flag)\n        padding_bits = get_bits(&gb, 3);\n    if (!idle_flag && (!padding_flag || padding_bits != 0)) {\n        if (sl->packet_seq_num_len)\n            skip_bits_long(&gb, sl->packet_seq_num_len);\n        if (sl->degr_prior_len)\n            if (get_bits1(&gb))\n                skip_bits(&gb, sl->degr_prior_len);\n        if (ocr_flag)\n            skip_bits_long(&gb, sl->ocr_len);\n        if (au_start_flag) {\n            if (sl->use_rand_acc_pt)\n                get_bits1(&gb);\n            if (sl->au_seq_num_len > 0)\n                skip_bits_long(&gb, sl->au_seq_num_len);\n            if (sl->use_timestamps) {\n                dts_flag = get_bits1(&gb);\n                cts_flag = get_bits1(&gb);\n            }\n        }\n        if (sl->inst_bitrate_len)\n            inst_bitrate_flag = get_bits1(&gb);\n        if (dts_flag == 1)\n            dts = get_bits64(&gb, sl->timestamp_len);\n        if (cts_flag == 1)\n            cts = get_bits64(&gb, sl->timestamp_len);\n        if (sl->au_len > 0)\n            skip_bits_long(&gb, sl->au_len);\n        if (inst_bitrate_flag)\n            skip_bits_long(&gb, sl->inst_bitrate_len);\n    }\n    if (dts != AV_NOPTS_VALUE)\n        pes->dts = dts;\n    if (cts != AV_NOPTS_VALUE)\n        pes->pts = cts;\n    if (sl->timestamp_len && sl->timestamp_res)\n        avpriv_set_pts_info(pes->st, sl->timestamp_len, 1, sl->timestamp_res);\n    return (get_bits_count(&gb) + 7) >> 3;\n}', 'static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,\n                                int bit_size)\n{\n    int buffer_size;\n    int ret = 0;\n    if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {\n        buffer_size = bit_size = 0;\n        buffer      = NULL;\n        ret         = AVERROR_INVALIDDATA;\n    }\n    buffer_size = (bit_size + 7) >> 3;\n    s->buffer             = buffer;\n    s->size_in_bits       = bit_size;\n#if !UNCHECKED_BITSTREAM_READER\n    s->size_in_bits_plus8 = bit_size + 8;\n#endif\n    s->buffer_end         = buffer + buffer_size;\n    s->index              = 0;\n    return ret;\n}', 'static inline unsigned int get_bits1(GetBitContext *s)\n{\n    unsigned int index = s->index;\n    uint8_t result     = s->buffer[index >> 3];\n#ifdef BITSTREAM_READER_LE\n    result >>= index & 7;\n    result  &= 1;\n#else\n    result <<= index & 7;\n    result >>= 8 - 1;\n#endif\n#if !UNCHECKED_BITSTREAM_READER\n    if (s->index < s->size_in_bits_plus8)\n#endif\n        index++;\n    s->index = index;\n    return result;\n}']