libavcodec/wmavoice.c:1666: error: Null Dereference
  pointer `gb->buffer` last assigned on line 1659 could be null and is dereferenced by call to `get_bits1()` at line 1666, column 10.

libavcodec/wmavoice.c:1651:1: start of procedure check_bits_for_superframe()
1649.  * @return -1 if unsupported, 1 on not enough bits or 0 if OK.
1650.  */
1651. static int check_bits_for_superframe(GetBitContext *orig_gb,
      ^
1652.                                      WMAVoiceContext *s)
1653. {

libavcodec/wmavoice.c:1654:5: 
1652.                                      WMAVoiceContext *s)
1653. {
1654.     GetBitContext s_gb, *gb = &s_gb;
          ^
1655.     int n, need_bits, bd_idx;
1656.     const struct frame_type_desc *frame_desc;

libavcodec/wmavoice.c:1659:5: 
1657. 
1658.     /* initialize a copy */
1659.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
          ^
1660.     skip_bits_long(gb, get_bits_count(orig_gb));
1661.     assert(get_bits_left(gb) == get_bits_left(orig_gb));

libavcodec/get_bits.h:372:1: start of procedure init_get_bits()
  370.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
  371.  */
  372. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  373.                                 int bit_size)
  374. {

libavcodec/get_bits.h:376:5: 
  374. {
  375.     int buffer_size;
  376.     int ret = 0;
           ^
  377. 
  378.     if (bit_size > INT_MAX - 7 || bit_size <= 0) {

libavcodec/get_bits.h:378:9: Taking true branch
  376.     int ret = 0;
  377. 
  378.     if (bit_size > INT_MAX - 7 || bit_size <= 0) {
               ^
  379.         buffer_size = bit_size = 0;
  380.         buffer = NULL;

libavcodec/get_bits.h:379:9: 
  377. 
  378.     if (bit_size > INT_MAX - 7 || bit_size <= 0) {
  379.         buffer_size = bit_size = 0;
               ^
  380.         buffer = NULL;
  381.         ret = AVERROR_INVALIDDATA;

libavcodec/get_bits.h:380:9: 
  378.     if (bit_size > INT_MAX - 7 || bit_size <= 0) {
  379.         buffer_size = bit_size = 0;
  380.         buffer = NULL;
               ^
  381.         ret = AVERROR_INVALIDDATA;
  382.     }

libavcodec/get_bits.h:381:9: 
  379.         buffer_size = bit_size = 0;
  380.         buffer = NULL;
  381.         ret = AVERROR_INVALIDDATA;
               ^
  382.     }
  383. 

libavcodec/get_bits.h:384:5: 
  382.     }
  383. 
  384.     buffer_size = (bit_size + 7) >> 3;
           ^
  385. 
  386.     s->buffer       = buffer;

libavcodec/get_bits.h:386:5: 
  384.     buffer_size = (bit_size + 7) >> 3;
  385. 
  386.     s->buffer       = buffer;
           ^
  387.     s->size_in_bits = bit_size;
  388. #if !UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:387:5: 
  385. 
  386.     s->buffer       = buffer;
  387.     s->size_in_bits = bit_size;
           ^
  388. #if !UNCHECKED_BITSTREAM_READER
  389.     s->size_in_bits_plus8 = bit_size + 8;

libavcodec/get_bits.h:389:5: 
  387.     s->size_in_bits = bit_size;
  388. #if !UNCHECKED_BITSTREAM_READER
  389.     s->size_in_bits_plus8 = bit_size + 8;
           ^
  390. #endif
  391.     s->buffer_end   = buffer + buffer_size;

libavcodec/get_bits.h:391:5: 
  389.     s->size_in_bits_plus8 = bit_size + 8;
  390. #endif
  391.     s->buffer_end   = buffer + buffer_size;
           ^
  392.     s->index        = 0;
  393.     return ret;

libavcodec/get_bits.h:392:5: 
  390. #endif
  391.     s->buffer_end   = buffer + buffer_size;
  392.     s->index        = 0;
           ^
  393.     return ret;
  394. }

libavcodec/get_bits.h:393:5: 
  391.     s->buffer_end   = buffer + buffer_size;
  392.     s->index        = 0;
  393.     return ret;
           ^
  394. }
  395. 

libavcodec/get_bits.h:394:1: return from a call to init_get_bits
  392.     s->index        = 0;
  393.     return ret;
  394. }
       ^
  395. 
  396. static inline void align_get_bits(GetBitContext *s)

libavcodec/wmavoice.c:1660:5: 
1658.     /* initialize a copy */
1659.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
1660.     skip_bits_long(gb, get_bits_count(orig_gb));
          ^
1661.     assert(get_bits_left(gb) == get_bits_left(orig_gb));
1662. 

libavcodec/get_bits.h:192:1: start of procedure get_bits_count()
  190. #define GET_CACHE(name, gb) ((uint32_t)name##_cache)
  191. 
  192. static inline int get_bits_count(const GetBitContext *s)
       ^
  193. {
  194.     return s->index;

libavcodec/get_bits.h:194:5: 
  192. static inline int get_bits_count(const GetBitContext *s)
  193. {
  194.     return s->index;
           ^
  195. }
  196. 

libavcodec/get_bits.h:195:1: return from a call to get_bits_count
  193. {
  194.     return s->index;
  195. }
       ^
  196. 
  197. static inline void skip_bits_long(GetBitContext *s, int n){

libavcodec/get_bits.h:197:1: start of procedure skip_bits_long()
  195. }
  196. 
  197. static inline void skip_bits_long(GetBitContext *s, int n){
       ^
  198. #if UNCHECKED_BITSTREAM_READER
  199.     s->index += n;

libavcodec/get_bits.h:199:5: 
  197. static inline void skip_bits_long(GetBitContext *s, int n){
  198. #if UNCHECKED_BITSTREAM_READER
  199.     s->index += n;
           ^
  200. #else
  201.     s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);

libavcodec/get_bits.h:203:1: return from a call to skip_bits_long
  201.     s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);
  202. #endif
  203. }
       ^
  204. 
  205. /**

libavcodec/wmavoice.c:1661:5: 
1659.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
1660.     skip_bits_long(gb, get_bits_count(orig_gb));
1661.     assert(get_bits_left(gb) == get_bits_left(orig_gb));
          ^
1662. 
1663.     /* superframe header */

libavcodec/wmavoice.c:1664:9: 
1662. 
1663.     /* superframe header */
1664.     if (get_bits_left(gb) < 14)
              ^
1665.         return 1;
1666.     if (!get_bits1(gb))

libavcodec/get_bits.h:531:1: start of procedure get_bits_left()
  529. }
  530. 
  531. static inline int get_bits_left(GetBitContext *gb)
       ^
  532. {
  533.     return gb->size_in_bits - get_bits_count(gb);

libavcodec/get_bits.h:533:5: 
  531. static inline int get_bits_left(GetBitContext *gb)
  532. {
  533.     return gb->size_in_bits - get_bits_count(gb);
           ^
  534. }
  535. 

libavcodec/get_bits.h:192:1: start of procedure get_bits_count()
    190. #define GET_CACHE(name, gb) ((uint32_t)name##_cache)
    191. 
    192. static inline int get_bits_count(const GetBitContext *s)
         ^
    193. {
    194.     return s->index;

libavcodec/get_bits.h:194:5: 
    192. static inline int get_bits_count(const GetBitContext *s)
    193. {
    194.     return s->index;
             ^
    195. }
    196. 

libavcodec/get_bits.h:195:1: return from a call to get_bits_count
    193. {
    194.     return s->index;
    195. }
         ^
    196. 
    197. static inline void skip_bits_long(GetBitContext *s, int n){

libavcodec/get_bits.h:534:1: return from a call to get_bits_left
  532. {
  533.     return gb->size_in_bits - get_bits_count(gb);
  534. }
       ^
  535. 
  536. //#define TRACE

libavcodec/wmavoice.c:1664:9: Taking false branch
1662. 
1663.     /* superframe header */
1664.     if (get_bits_left(gb) < 14)
              ^
1665.         return 1;
1666.     if (!get_bits1(gb))

libavcodec/wmavoice.c:1666:10: 
1664.     if (get_bits_left(gb) < 14)
1665.         return 1;
1666.     if (!get_bits1(gb))
               ^
1667.         return -1;                        // WMAPro-in-WMAVoice superframe
1668.     if (get_bits1(gb)) skip_bits(gb, 12); // number of  samples in superframe

libavcodec/get_bits.h:268:1: start of procedure get_bits1()
  266. }
  267. 
  268. static inline unsigned int get_bits1(GetBitContext *s)
       ^
  269. {
  270.     unsigned int index = s->index;

libavcodec/get_bits.h:270:5: 
  268. static inline unsigned int get_bits1(GetBitContext *s)
  269. {
  270.     unsigned int index = s->index;
           ^
  271.     uint8_t result = s->buffer[index>>3];
  272. #ifdef BITSTREAM_READER_LE

libavcodec/get_bits.h:271:5: 
  269. {
  270.     unsigned int index = s->index;
  271.     uint8_t result = s->buffer[index>>3];
           ^
  272. #ifdef BITSTREAM_READER_LE
  273.     result >>= index & 7;

static int check_bits_for_superframe(GetBitContext *orig_gb,
                                     WMAVoiceContext *s)
{
    GetBitContext s_gb, *gb = &s_gb;
    int n, need_bits, bd_idx;
    const struct frame_type_desc *frame_desc;
    init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
    skip_bits_long(gb, get_bits_count(orig_gb));
    assert(get_bits_left(gb) == get_bits_left(orig_gb));
    if (get_bits_left(gb) < 14)
        return 1;
    if (!get_bits1(gb))
        return -1;
    if (get_bits1(gb)) skip_bits(gb, 12);
    if (s->has_residual_lsps) {
        if (get_bits_left(gb) < s->sframe_lsp_bitsize)
            return 1;
        skip_bits_long(gb, s->sframe_lsp_bitsize);
    }
    for (n = 0; n < MAX_FRAMES; n++) {
        int aw_idx_is_ext = 0;
        if (!s->has_residual_lsps) {
           if (get_bits_left(gb) < s->frame_lsp_bitsize) return 1;
           skip_bits_long(gb, s->frame_lsp_bitsize);
        }
        bd_idx = s->vbm_tree[get_vlc2(gb, frame_type_vlc.table, 6, 3)];
        if (bd_idx < 0)
            return -1;
        frame_desc = &frame_descs[bd_idx];
        if (frame_desc->acb_type == ACB_TYPE_ASYMMETRIC) {
            if (get_bits_left(gb) < s->pitch_nbits)
                return 1;
            skip_bits_long(gb, s->pitch_nbits);
        }
        if (frame_desc->fcb_type == FCB_TYPE_SILENCE) {
            skip_bits(gb, 8);
        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {
            int tmp = get_bits(gb, 6);
            if (tmp >= 0x36) {
                skip_bits(gb, 2);
                aw_idx_is_ext = 1;
            }
        }
        if (frame_desc->acb_type == ACB_TYPE_HAMMING) {
            need_bits = s->block_pitch_nbits +
                (frame_desc->n_blocks - 1) * s->block_delta_pitch_nbits;
        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {
            need_bits = 2 * !aw_idx_is_ext;
        } else
            need_bits = 0;
        need_bits += frame_desc->frame_size;
        if (get_bits_left(gb) < need_bits)
            return 1;
        skip_bits_long(gb, need_bits);
    }
    return 0;
}
['static int check_bits_for_superframe(GetBitContext *orig_gb,\n                                     WMAVoiceContext *s)\n{\n    GetBitContext s_gb, *gb = &s_gb;\n    int n, need_bits, bd_idx;\n    const struct frame_type_desc *frame_desc;\n    init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);\n    skip_bits_long(gb, get_bits_count(orig_gb));\n    assert(get_bits_left(gb) == get_bits_left(orig_gb));\n    if (get_bits_left(gb) < 14)\n        return 1;\n    if (!get_bits1(gb))\n        return -1;\n    if (get_bits1(gb)) skip_bits(gb, 12);\n    if (s->has_residual_lsps) {\n        if (get_bits_left(gb) < s->sframe_lsp_bitsize)\n            return 1;\n        skip_bits_long(gb, s->sframe_lsp_bitsize);\n    }\n    for (n = 0; n < MAX_FRAMES; n++) {\n        int aw_idx_is_ext = 0;\n        if (!s->has_residual_lsps) {\n           if (get_bits_left(gb) < s->frame_lsp_bitsize) return 1;\n           skip_bits_long(gb, s->frame_lsp_bitsize);\n        }\n        bd_idx = s->vbm_tree[get_vlc2(gb, frame_type_vlc.table, 6, 3)];\n        if (bd_idx < 0)\n            return -1;\n        frame_desc = &frame_descs[bd_idx];\n        if (frame_desc->acb_type == ACB_TYPE_ASYMMETRIC) {\n            if (get_bits_left(gb) < s->pitch_nbits)\n                return 1;\n            skip_bits_long(gb, s->pitch_nbits);\n        }\n        if (frame_desc->fcb_type == FCB_TYPE_SILENCE) {\n            skip_bits(gb, 8);\n        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {\n            int tmp = get_bits(gb, 6);\n            if (tmp >= 0x36) {\n                skip_bits(gb, 2);\n                aw_idx_is_ext = 1;\n            }\n        }\n        if (frame_desc->acb_type == ACB_TYPE_HAMMING) {\n            need_bits = s->block_pitch_nbits +\n                (frame_desc->n_blocks - 1) * s->block_delta_pitch_nbits;\n        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {\n            need_bits = 2 * !aw_idx_is_ext;\n        } else\n            need_bits = 0;\n        need_bits += frame_desc->frame_size;\n        if (get_bits_left(gb) < need_bits)\n            return 1;\n        skip_bits_long(gb, need_bits);\n    }\n    return 0;\n}', 'static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,\n                                int bit_size)\n{\n    int buffer_size;\n    int ret = 0;\n    if (bit_size > INT_MAX - 7 || bit_size <= 0) {\n        buffer_size = bit_size = 0;\n        buffer = NULL;\n        ret = AVERROR_INVALIDDATA;\n    }\n    buffer_size = (bit_size + 7) >> 3;\n    s->buffer       = buffer;\n    s->size_in_bits = bit_size;\n#if !UNCHECKED_BITSTREAM_READER\n    s->size_in_bits_plus8 = bit_size + 8;\n#endif\n    s->buffer_end   = buffer + buffer_size;\n    s->index        = 0;\n    return ret;\n}', 'static inline int get_bits_count(const GetBitContext *s)\n{\n    return s->index;\n}', 'static inline void skip_bits_long(GetBitContext *s, int n){\n#if UNCHECKED_BITSTREAM_READER\n    s->index += n;\n#else\n    s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);\n#endif\n}', 'static inline int get_bits_left(GetBitContext *gb)\n{\n    return gb->size_in_bits - get_bits_count(gb);\n}', 'static inline unsigned int get_bits1(GetBitContext *s)\n{\n    unsigned int index = s->index;\n    uint8_t result = s->buffer[index>>3];\n#ifdef BITSTREAM_READER_LE\n    result >>= index & 7;\n    result &= 1;\n#else\n    result <<= index & 7;\n    result >>= 8 - 1;\n#endif\n#if !UNCHECKED_BITSTREAM_READER\n    if (s->index < s->size_in_bits_plus8)\n#endif\n        index++;\n    s->index = index;\n    return result;\n}']