libavformat/mpegts.c:698: error: Null Dereference
  pointer `&gb->buffer` last assigned on line 689 could be null and is dereferenced by call to `get_bits1()` at line 698, column 20.

libavformat/mpegts.c:682:1: start of procedure read_sl_header()
680. }
681. 
682. static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)
     ^
683. {
684.     GetBitContext gb;

libavformat/mpegts.c:685:5: 
683. {
684.     GetBitContext gb;
685.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
         ^
686.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
687.     int dts_flag = -1, cts_flag = -1;

libavformat/mpegts.c:686:5: 
684.     GetBitContext gb;
685.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
686.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
         ^
687.     int dts_flag = -1, cts_flag = -1;
688.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;

libavformat/mpegts.c:687:5: 
685.     int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
686.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
687.     int dts_flag = -1, cts_flag = -1;
         ^
688.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
689.     init_get_bits(&gb, buf, buf_size*8);

libavformat/mpegts.c:688:5: 
686.     int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
687.     int dts_flag = -1, cts_flag = -1;
688.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
         ^
689.     init_get_bits(&gb, buf, buf_size*8);
690. 

libavformat/mpegts.c:689:5: 
687.     int dts_flag = -1, cts_flag = -1;
688.     int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
689.     init_get_bits(&gb, buf, buf_size*8);
         ^
690. 
691.     if (sl->use_au_start)

libavcodec/get_bits.h:352:1: start of procedure init_get_bits()
  350.  * @param bit_size the size of the buffer in bits
  351.  */
  352. static inline void init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  353.                                  int bit_size)
  354. {

libavcodec/get_bits.h:355:5: 
  353.                                  int bit_size)
  354. {
  355.     int buffer_size = (bit_size+7)>>3;
           ^
  356.     if (buffer_size < 0 || bit_size < 0) {
  357.         buffer_size = bit_size = 0;

libavcodec/get_bits.h:356:9: Taking true branch
  354. {
  355.     int buffer_size = (bit_size+7)>>3;
  356.     if (buffer_size < 0 || bit_size < 0) {
               ^
  357.         buffer_size = bit_size = 0;
  358.         buffer = NULL;

libavcodec/get_bits.h:357:9: 
  355.     int buffer_size = (bit_size+7)>>3;
  356.     if (buffer_size < 0 || bit_size < 0) {
  357.         buffer_size = bit_size = 0;
               ^
  358.         buffer = NULL;
  359.     }

libavcodec/get_bits.h:358:9: 
  356.     if (buffer_size < 0 || bit_size < 0) {
  357.         buffer_size = bit_size = 0;
  358.         buffer = NULL;
               ^
  359.     }
  360. 

libavcodec/get_bits.h:361:5: 
  359.     }
  360. 
  361.     s->buffer       = buffer;
           ^
  362.     s->size_in_bits = bit_size;
  363. #if !UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:362:5: 
  360. 
  361.     s->buffer       = buffer;
  362.     s->size_in_bits = bit_size;
           ^
  363. #if !UNCHECKED_BITSTREAM_READER
  364.     s->size_in_bits_plus8 = bit_size + 8;

libavcodec/get_bits.h:364:5: 
  362.     s->size_in_bits = bit_size;
  363. #if !UNCHECKED_BITSTREAM_READER
  364.     s->size_in_bits_plus8 = bit_size + 8;
           ^
  365. #endif
  366.     s->buffer_end   = buffer + buffer_size;

libavcodec/get_bits.h:366:5: 
  364.     s->size_in_bits_plus8 = bit_size + 8;
  365. #endif
  366.     s->buffer_end   = buffer + buffer_size;
           ^
  367.     s->index        = 0;
  368. }

libavcodec/get_bits.h:367:5: 
  365. #endif
  366.     s->buffer_end   = buffer + buffer_size;
  367.     s->index        = 0;
           ^
  368. }
  369. 

libavcodec/get_bits.h:368:1: return from a call to init_get_bits
  366.     s->buffer_end   = buffer + buffer_size;
  367.     s->index        = 0;
  368. }
       ^
  369. 
  370. static inline void align_get_bits(GetBitContext *s)

libavformat/mpegts.c:691:9: Taking false branch
689.     init_get_bits(&gb, buf, buf_size*8);
690. 
691.     if (sl->use_au_start)
             ^
692.         au_start_flag = get_bits1(&gb);
693.     if (sl->use_au_end)

libavformat/mpegts.c:693:9: Taking false branch
691.     if (sl->use_au_start)
692.         au_start_flag = get_bits1(&gb);
693.     if (sl->use_au_end)
             ^
694.         au_end_flag = get_bits1(&gb);
695.     if (!sl->use_au_start && !sl->use_au_end)

libavformat/mpegts.c:695:10: Taking true branch
693.     if (sl->use_au_end)
694.         au_end_flag = get_bits1(&gb);
695.     if (!sl->use_au_start && !sl->use_au_end)
              ^
696.         au_start_flag = au_end_flag = 1;
697.     if (sl->ocr_len > 0)

libavformat/mpegts.c:695:31: Taking true branch
693.     if (sl->use_au_end)
694.         au_end_flag = get_bits1(&gb);
695.     if (!sl->use_au_start && !sl->use_au_end)
                                   ^
696.         au_start_flag = au_end_flag = 1;
697.     if (sl->ocr_len > 0)

libavformat/mpegts.c:696:9: 
694.         au_end_flag = get_bits1(&gb);
695.     if (!sl->use_au_start && !sl->use_au_end)
696.         au_start_flag = au_end_flag = 1;
             ^
697.     if (sl->ocr_len > 0)
698.         ocr_flag = get_bits1(&gb);

libavformat/mpegts.c:697:9: Taking true branch
695.     if (!sl->use_au_start && !sl->use_au_end)
696.         au_start_flag = au_end_flag = 1;
697.     if (sl->ocr_len > 0)
             ^
698.         ocr_flag = get_bits1(&gb);
699.     if (sl->use_idle)

libavformat/mpegts.c:698:9: 
696.         au_start_flag = au_end_flag = 1;
697.     if (sl->ocr_len > 0)
698.         ocr_flag = get_bits1(&gb);
             ^
699.     if (sl->use_idle)
700.         idle_flag = get_bits1(&gb);

libavcodec/get_bits.h:268:1: start of procedure get_bits1()
  266. }
  267. 
  268. static inline unsigned int get_bits1(GetBitContext *s)
       ^
  269. {
  270.     unsigned int index = s->index;

libavcodec/get_bits.h:270:5: 
  268. static inline unsigned int get_bits1(GetBitContext *s)
  269. {
  270.     unsigned int index = s->index;
           ^
  271.     uint8_t result = s->buffer[index>>3];
  272. #ifdef BITSTREAM_READER_LE

libavcodec/get_bits.h:271:5: 
  269. {
  270.     unsigned int index = s->index;
  271.     uint8_t result = s->buffer[index>>3];
           ^
  272. #ifdef BITSTREAM_READER_LE
  273.     result >>= index & 7;

static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)
{
    GetBitContext gb;
    int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;
    int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;
    int dts_flag = -1, cts_flag = -1;
    int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;
    init_get_bits(&gb, buf, buf_size*8);
    if (sl->use_au_start)
        au_start_flag = get_bits1(&gb);
    if (sl->use_au_end)
        au_end_flag = get_bits1(&gb);
    if (!sl->use_au_start && !sl->use_au_end)
        au_start_flag = au_end_flag = 1;
    if (sl->ocr_len > 0)
        ocr_flag = get_bits1(&gb);
    if (sl->use_idle)
        idle_flag = get_bits1(&gb);
    if (sl->use_padding)
        padding_flag = get_bits1(&gb);
    if (padding_flag)
        padding_bits = get_bits(&gb, 3);
    if (!idle_flag && (!padding_flag || padding_bits != 0)) {
        if (sl->packet_seq_num_len)
            skip_bits_long(&gb, sl->packet_seq_num_len);
        if (sl->degr_prior_len)
            if (get_bits1(&gb))
                skip_bits(&gb, sl->degr_prior_len);
        if (ocr_flag)
            skip_bits_long(&gb, sl->ocr_len);
        if (au_start_flag) {
            if (sl->use_rand_acc_pt)
                get_bits1(&gb);
            if (sl->au_seq_num_len > 0)
                skip_bits_long(&gb, sl->au_seq_num_len);
            if (sl->use_timestamps) {
                dts_flag = get_bits1(&gb);
                cts_flag = get_bits1(&gb);
            }
        }
        if (sl->inst_bitrate_len)
            inst_bitrate_flag = get_bits1(&gb);
        if (dts_flag == 1)
            dts = get_bits64(&gb, sl->timestamp_len);
        if (cts_flag == 1)
            cts = get_bits64(&gb, sl->timestamp_len);
        if (sl->au_len > 0)
            skip_bits_long(&gb, sl->au_len);
        if (inst_bitrate_flag)
            skip_bits_long(&gb, sl->inst_bitrate_len);
    }
    if (dts != AV_NOPTS_VALUE)
        pes->dts = dts;
    if (cts != AV_NOPTS_VALUE)
        pes->pts = cts;
    if (sl->timestamp_len && sl->timestamp_res)
        avpriv_set_pts_info(pes->st, sl->timestamp_len, 1, sl->timestamp_res);
    return (get_bits_count(&gb) + 7) >> 3;
}
['static int read_sl_header(PESContext *pes, SLConfigDescr *sl, const uint8_t *buf, int buf_size)\n{\n    GetBitContext gb;\n    int au_start_flag = 0, au_end_flag = 0, ocr_flag = 0, idle_flag = 0;\n    int padding_flag = 0, padding_bits = 0, inst_bitrate_flag = 0;\n    int dts_flag = -1, cts_flag = -1;\n    int64_t dts = AV_NOPTS_VALUE, cts = AV_NOPTS_VALUE;\n    init_get_bits(&gb, buf, buf_size*8);\n    if (sl->use_au_start)\n        au_start_flag = get_bits1(&gb);\n    if (sl->use_au_end)\n        au_end_flag = get_bits1(&gb);\n    if (!sl->use_au_start && !sl->use_au_end)\n        au_start_flag = au_end_flag = 1;\n    if (sl->ocr_len > 0)\n        ocr_flag = get_bits1(&gb);\n    if (sl->use_idle)\n        idle_flag = get_bits1(&gb);\n    if (sl->use_padding)\n        padding_flag = get_bits1(&gb);\n    if (padding_flag)\n        padding_bits = get_bits(&gb, 3);\n    if (!idle_flag && (!padding_flag || padding_bits != 0)) {\n        if (sl->packet_seq_num_len)\n            skip_bits_long(&gb, sl->packet_seq_num_len);\n        if (sl->degr_prior_len)\n            if (get_bits1(&gb))\n                skip_bits(&gb, sl->degr_prior_len);\n        if (ocr_flag)\n            skip_bits_long(&gb, sl->ocr_len);\n        if (au_start_flag) {\n            if (sl->use_rand_acc_pt)\n                get_bits1(&gb);\n            if (sl->au_seq_num_len > 0)\n                skip_bits_long(&gb, sl->au_seq_num_len);\n            if (sl->use_timestamps) {\n                dts_flag = get_bits1(&gb);\n                cts_flag = get_bits1(&gb);\n            }\n        }\n        if (sl->inst_bitrate_len)\n            inst_bitrate_flag = get_bits1(&gb);\n        if (dts_flag == 1)\n            dts = get_bits64(&gb, sl->timestamp_len);\n        if (cts_flag == 1)\n            cts = get_bits64(&gb, sl->timestamp_len);\n        if (sl->au_len > 0)\n            skip_bits_long(&gb, sl->au_len);\n        if (inst_bitrate_flag)\n            skip_bits_long(&gb, sl->inst_bitrate_len);\n    }\n    if (dts != AV_NOPTS_VALUE)\n        pes->dts = dts;\n    if (cts != AV_NOPTS_VALUE)\n        pes->pts = cts;\n    if (sl->timestamp_len && sl->timestamp_res)\n        avpriv_set_pts_info(pes->st, sl->timestamp_len, 1, sl->timestamp_res);\n    return (get_bits_count(&gb) + 7) >> 3;\n}', 'static inline void init_get_bits(GetBitContext *s, const uint8_t *buffer,\n                                 int bit_size)\n{\n    int buffer_size = (bit_size+7)>>3;\n    if (buffer_size < 0 || bit_size < 0) {\n        buffer_size = bit_size = 0;\n        buffer = NULL;\n    }\n    s->buffer       = buffer;\n    s->size_in_bits = bit_size;\n#if !UNCHECKED_BITSTREAM_READER\n    s->size_in_bits_plus8 = bit_size + 8;\n#endif\n    s->buffer_end   = buffer + buffer_size;\n    s->index        = 0;\n}', 'static inline unsigned int get_bits1(GetBitContext *s)\n{\n    unsigned int index = s->index;\n    uint8_t result = s->buffer[index>>3];\n#ifdef BITSTREAM_READER_LE\n    result >>= index & 7;\n    result &= 1;\n#else\n    result <<= index & 7;\n    result >>= 8 - 1;\n#endif\n#if !UNCHECKED_BITSTREAM_READER\n    if (s->index < s->size_in_bits_plus8)\n#endif\n        index++;\n    s->index = index;\n    return result;\n}']