libavcodec/wmavoice.c:1668: error: Null Dereference
  pointer `gb->buffer` last assigned on line 1661 could be null and is dereferenced by call to `get_bits1()` at line 1668, column 10.

libavcodec/wmavoice.c:1653:1: start of procedure check_bits_for_superframe()
1651.  * @return -1 if unsupported, 1 on not enough bits or 0 if OK.
1652.  */
1653. static int check_bits_for_superframe(GetBitContext *orig_gb,
      ^
1654.                                      WMAVoiceContext *s)
1655. {

libavcodec/wmavoice.c:1656:5: 
1654.                                      WMAVoiceContext *s)
1655. {
1656.     GetBitContext s_gb, *gb = &s_gb;
          ^
1657.     int n, need_bits, bd_idx;
1658.     const struct frame_type_desc *frame_desc;

libavcodec/wmavoice.c:1661:5: 
1659. 
1660.     /* initialize a copy */
1661.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
          ^
1662.     skip_bits_long(gb, get_bits_count(orig_gb));
1663.     assert(get_bits_left(gb) == get_bits_left(orig_gb));

libavcodec/get_bits.h:375:1: start of procedure init_get_bits()
  373.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
  374.  */
  375. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  376.                                 int bit_size)
  377. {

libavcodec/get_bits.h:379:5: 
  377. {
  378.     int buffer_size;
  379.     int ret = 0;
           ^
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {

libavcodec/get_bits.h:381:9: Taking true branch
  379.     int ret = 0;
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
               ^
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;

libavcodec/get_bits.h:382:9: 
  380. 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
  382.         buffer_size = bit_size = 0;
               ^
  383.         buffer      = NULL;
  384.         ret         = AVERROR_INVALIDDATA;

libavcodec/get_bits.h:383:9: 
  381.     if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;
               ^
  384.         ret         = AVERROR_INVALIDDATA;
  385.     }

libavcodec/get_bits.h:384:9: 
  382.         buffer_size = bit_size = 0;
  383.         buffer      = NULL;
  384.         ret         = AVERROR_INVALIDDATA;
               ^
  385.     }
  386. 

libavcodec/get_bits.h:387:5: 
  385.     }
  386. 
  387.     buffer_size = (bit_size + 7) >> 3;
           ^
  388. 
  389.     s->buffer             = buffer;

libavcodec/get_bits.h:389:5: 
  387.     buffer_size = (bit_size + 7) >> 3;
  388. 
  389.     s->buffer             = buffer;
           ^
  390.     s->size_in_bits       = bit_size;
  391. #if !UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:390:5: 
  388. 
  389.     s->buffer             = buffer;
  390.     s->size_in_bits       = bit_size;
           ^
  391. #if !UNCHECKED_BITSTREAM_READER
  392.     s->size_in_bits_plus8 = bit_size + 8;

libavcodec/get_bits.h:392:5: 
  390.     s->size_in_bits       = bit_size;
  391. #if !UNCHECKED_BITSTREAM_READER
  392.     s->size_in_bits_plus8 = bit_size + 8;
           ^
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;

libavcodec/get_bits.h:394:5: 
  392.     s->size_in_bits_plus8 = bit_size + 8;
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;
           ^
  395.     s->index              = 0;
  396. 

libavcodec/get_bits.h:395:5: 
  393. #endif
  394.     s->buffer_end         = buffer + buffer_size;
  395.     s->index              = 0;
           ^
  396. 
  397.     return ret;

libavcodec/get_bits.h:397:5: 
  395.     s->index              = 0;
  396. 
  397.     return ret;
           ^
  398. }
  399. 

libavcodec/get_bits.h:398:1: return from a call to init_get_bits
  396. 
  397.     return ret;
  398. }
       ^
  399. 
  400. /**

libavcodec/wmavoice.c:1662:5: 
1660.     /* initialize a copy */
1661.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
1662.     skip_bits_long(gb, get_bits_count(orig_gb));
          ^
1663.     assert(get_bits_left(gb) == get_bits_left(orig_gb));
1664. 

libavcodec/get_bits.h:194:1: start of procedure get_bits_count()
  192. #define GET_CACHE(name, gb) ((uint32_t) name ## _cache)
  193. 
  194. static inline int get_bits_count(const GetBitContext *s)
       ^
  195. {
  196.     return s->index;

libavcodec/get_bits.h:196:5: 
  194. static inline int get_bits_count(const GetBitContext *s)
  195. {
  196.     return s->index;
           ^
  197. }
  198. 

libavcodec/get_bits.h:197:1: return from a call to get_bits_count
  195. {
  196.     return s->index;
  197. }
       ^
  198. 
  199. static inline void skip_bits_long(GetBitContext *s, int n)

libavcodec/get_bits.h:199:1: start of procedure skip_bits_long()
  197. }
  198. 
  199. static inline void skip_bits_long(GetBitContext *s, int n)
       ^
  200. {
  201. #if UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:202:5: 
  200. {
  201. #if UNCHECKED_BITSTREAM_READER
  202.     s->index += n;
           ^
  203. #else
  204.     s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);

libavcodec/get_bits.h:206:1: return from a call to skip_bits_long
  204.     s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);
  205. #endif
  206. }
       ^
  207. 
  208. /**

libavcodec/wmavoice.c:1663:5: 
1661.     init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
1662.     skip_bits_long(gb, get_bits_count(orig_gb));
1663.     assert(get_bits_left(gb) == get_bits_left(orig_gb));
          ^
1664. 
1665.     /* superframe header */

libavcodec/wmavoice.c:1666:9: 
1664. 
1665.     /* superframe header */
1666.     if (get_bits_left(gb) < 14)
              ^
1667.         return 1;
1668.     if (!get_bits1(gb))

libavcodec/get_bits.h:554:1: start of procedure get_bits_left()
  552. }
  553. 
  554. static inline int get_bits_left(GetBitContext *gb)
       ^
  555. {
  556.     return gb->size_in_bits - get_bits_count(gb);

libavcodec/get_bits.h:556:5: 
  554. static inline int get_bits_left(GetBitContext *gb)
  555. {
  556.     return gb->size_in_bits - get_bits_count(gb);
           ^
  557. }
  558. 

libavcodec/get_bits.h:194:1: start of procedure get_bits_count()
    192. #define GET_CACHE(name, gb) ((uint32_t) name ## _cache)
    193. 
    194. static inline int get_bits_count(const GetBitContext *s)
         ^
    195. {
    196.     return s->index;

libavcodec/get_bits.h:196:5: 
    194. static inline int get_bits_count(const GetBitContext *s)
    195. {
    196.     return s->index;
             ^
    197. }
    198. 

libavcodec/get_bits.h:197:1: return from a call to get_bits_count
    195. {
    196.     return s->index;
    197. }
         ^
    198. 
    199. static inline void skip_bits_long(GetBitContext *s, int n)

libavcodec/get_bits.h:557:1: return from a call to get_bits_left
  555. {
  556.     return gb->size_in_bits - get_bits_count(gb);
  557. }
       ^
  558. 
  559. //#define TRACE

libavcodec/wmavoice.c:1666:9: Taking false branch
1664. 
1665.     /* superframe header */
1666.     if (get_bits_left(gb) < 14)
              ^
1667.         return 1;
1668.     if (!get_bits1(gb))

libavcodec/wmavoice.c:1668:10: 
1666.     if (get_bits_left(gb) < 14)
1667.         return 1;
1668.     if (!get_bits1(gb))
               ^
1669.         return -1;                        // WMAPro-in-WMAVoice superframe
1670.     if (get_bits1(gb)) skip_bits(gb, 12); // number of  samples in superframe

libavcodec/get_bits.h:271:1: start of procedure get_bits1()
  269. }
  270. 
  271. static inline unsigned int get_bits1(GetBitContext *s)
       ^
  272. {
  273.     unsigned int index = s->index;

libavcodec/get_bits.h:273:5: 
  271. static inline unsigned int get_bits1(GetBitContext *s)
  272. {
  273.     unsigned int index = s->index;
           ^
  274.     uint8_t result     = s->buffer[index >> 3];
  275. #ifdef BITSTREAM_READER_LE

libavcodec/get_bits.h:274:5: 
  272. {
  273.     unsigned int index = s->index;
  274.     uint8_t result     = s->buffer[index >> 3];
           ^
  275. #ifdef BITSTREAM_READER_LE
  276.     result >>= index & 7;

static int check_bits_for_superframe(GetBitContext *orig_gb,
                                     WMAVoiceContext *s)
{
    GetBitContext s_gb, *gb = &s_gb;
    int n, need_bits, bd_idx;
    const struct frame_type_desc *frame_desc;
    init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);
    skip_bits_long(gb, get_bits_count(orig_gb));
    assert(get_bits_left(gb) == get_bits_left(orig_gb));
    if (get_bits_left(gb) < 14)
        return 1;
    if (!get_bits1(gb))
        return -1;
    if (get_bits1(gb)) skip_bits(gb, 12);
    if (s->has_residual_lsps) {
        if (get_bits_left(gb) < s->sframe_lsp_bitsize)
            return 1;
        skip_bits_long(gb, s->sframe_lsp_bitsize);
    }
    for (n = 0; n < MAX_FRAMES; n++) {
        int aw_idx_is_ext = 0;
        if (!s->has_residual_lsps) {
           if (get_bits_left(gb) < s->frame_lsp_bitsize) return 1;
           skip_bits_long(gb, s->frame_lsp_bitsize);
        }
        bd_idx = s->vbm_tree[get_vlc2(gb, frame_type_vlc.table, 6, 3)];
        if (bd_idx < 0)
            return -1;
        frame_desc = &frame_descs[bd_idx];
        if (frame_desc->acb_type == ACB_TYPE_ASYMMETRIC) {
            if (get_bits_left(gb) < s->pitch_nbits)
                return 1;
            skip_bits_long(gb, s->pitch_nbits);
        }
        if (frame_desc->fcb_type == FCB_TYPE_SILENCE) {
            skip_bits(gb, 8);
        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {
            int tmp = get_bits(gb, 6);
            if (tmp >= 0x36) {
                skip_bits(gb, 2);
                aw_idx_is_ext = 1;
            }
        }
        if (frame_desc->acb_type == ACB_TYPE_HAMMING) {
            need_bits = s->block_pitch_nbits +
                (frame_desc->n_blocks - 1) * s->block_delta_pitch_nbits;
        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {
            need_bits = 2 * !aw_idx_is_ext;
        } else
            need_bits = 0;
        need_bits += frame_desc->frame_size;
        if (get_bits_left(gb) < need_bits)
            return 1;
        skip_bits_long(gb, need_bits);
    }
    return 0;
}
['static int check_bits_for_superframe(GetBitContext *orig_gb,\n                                     WMAVoiceContext *s)\n{\n    GetBitContext s_gb, *gb = &s_gb;\n    int n, need_bits, bd_idx;\n    const struct frame_type_desc *frame_desc;\n    init_get_bits(gb, orig_gb->buffer, orig_gb->size_in_bits);\n    skip_bits_long(gb, get_bits_count(orig_gb));\n    assert(get_bits_left(gb) == get_bits_left(orig_gb));\n    if (get_bits_left(gb) < 14)\n        return 1;\n    if (!get_bits1(gb))\n        return -1;\n    if (get_bits1(gb)) skip_bits(gb, 12);\n    if (s->has_residual_lsps) {\n        if (get_bits_left(gb) < s->sframe_lsp_bitsize)\n            return 1;\n        skip_bits_long(gb, s->sframe_lsp_bitsize);\n    }\n    for (n = 0; n < MAX_FRAMES; n++) {\n        int aw_idx_is_ext = 0;\n        if (!s->has_residual_lsps) {\n           if (get_bits_left(gb) < s->frame_lsp_bitsize) return 1;\n           skip_bits_long(gb, s->frame_lsp_bitsize);\n        }\n        bd_idx = s->vbm_tree[get_vlc2(gb, frame_type_vlc.table, 6, 3)];\n        if (bd_idx < 0)\n            return -1;\n        frame_desc = &frame_descs[bd_idx];\n        if (frame_desc->acb_type == ACB_TYPE_ASYMMETRIC) {\n            if (get_bits_left(gb) < s->pitch_nbits)\n                return 1;\n            skip_bits_long(gb, s->pitch_nbits);\n        }\n        if (frame_desc->fcb_type == FCB_TYPE_SILENCE) {\n            skip_bits(gb, 8);\n        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {\n            int tmp = get_bits(gb, 6);\n            if (tmp >= 0x36) {\n                skip_bits(gb, 2);\n                aw_idx_is_ext = 1;\n            }\n        }\n        if (frame_desc->acb_type == ACB_TYPE_HAMMING) {\n            need_bits = s->block_pitch_nbits +\n                (frame_desc->n_blocks - 1) * s->block_delta_pitch_nbits;\n        } else if (frame_desc->fcb_type == FCB_TYPE_AW_PULSES) {\n            need_bits = 2 * !aw_idx_is_ext;\n        } else\n            need_bits = 0;\n        need_bits += frame_desc->frame_size;\n        if (get_bits_left(gb) < need_bits)\n            return 1;\n        skip_bits_long(gb, need_bits);\n    }\n    return 0;\n}', 'static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,\n                                int bit_size)\n{\n    int buffer_size;\n    int ret = 0;\n    if (bit_size > INT_MAX - 7 || bit_size < 0 || !buffer) {\n        buffer_size = bit_size = 0;\n        buffer      = NULL;\n        ret         = AVERROR_INVALIDDATA;\n    }\n    buffer_size = (bit_size + 7) >> 3;\n    s->buffer             = buffer;\n    s->size_in_bits       = bit_size;\n#if !UNCHECKED_BITSTREAM_READER\n    s->size_in_bits_plus8 = bit_size + 8;\n#endif\n    s->buffer_end         = buffer + buffer_size;\n    s->index              = 0;\n    return ret;\n}', 'static inline int get_bits_count(const GetBitContext *s)\n{\n    return s->index;\n}', 'static inline void skip_bits_long(GetBitContext *s, int n)\n{\n#if UNCHECKED_BITSTREAM_READER\n    s->index += n;\n#else\n    s->index += av_clip(n, -s->index, s->size_in_bits_plus8 - s->index);\n#endif\n}', 'static inline int get_bits_left(GetBitContext *gb)\n{\n    return gb->size_in_bits - get_bits_count(gb);\n}', 'static inline unsigned int get_bits1(GetBitContext *s)\n{\n    unsigned int index = s->index;\n    uint8_t result     = s->buffer[index >> 3];\n#ifdef BITSTREAM_READER_LE\n    result >>= index & 7;\n    result  &= 1;\n#else\n    result <<= index & 7;\n    result >>= 8 - 1;\n#endif\n#if !UNCHECKED_BITSTREAM_READER\n    if (s->index < s->size_in_bits_plus8)\n#endif\n        index++;\n    s->index = index;\n    return result;\n}']