libavcodec/aacdec.c:488: error: Null Dereference
  pointer `&gb->buffer` last assigned on line 471 could be null and is dereferenced by call to `decode_ga_specific_config()` at line 488, column 13.

libavcodec/aacdec.c:458:1: start of procedure decode_audio_specific_config()
456.  * @return  Returns error status or number of consumed bits. <0 - error
457.  */
458. static int decode_audio_specific_config(AACContext *ac,
     ^
459.                                         AVCodecContext *avctx,
460.                                         MPEG4AudioConfig *m4ac,

libavcodec/aacdec.c:467:10: 
465. 
466.     av_dlog(avctx, "extradata size %d\n", avctx->extradata_size);
467.     for (i = 0; i < avctx->extradata_size; i++)
              ^
468.          av_dlog(avctx, "%02x ", avctx->extradata[i]);
469.     av_dlog(avctx, "\n");

libavcodec/aacdec.c:467:17: Loop condition is false. Leaving loop
465. 
466.     av_dlog(avctx, "extradata size %d\n", avctx->extradata_size);
467.     for (i = 0; i < avctx->extradata_size; i++)
                     ^
468.          av_dlog(avctx, "%02x ", avctx->extradata[i]);
469.     av_dlog(avctx, "\n");

libavcodec/aacdec.c:471:5: 
469.     av_dlog(avctx, "\n");
470. 
471.     init_get_bits(&gb, data, data_size * 8);
         ^
472. 
473.     if ((i = ff_mpeg4audio_get_config(m4ac, data, data_size)) < 0)

libavcodec/get_bits.h:391:1: start of procedure init_get_bits()
  389.  * responsible for checking for the buffer end yourself (take advantage of the padding)!
  390.  */
  391. static inline void init_get_bits(GetBitContext *s,
       ^
  392.                    const uint8_t *buffer, int bit_size)
  393. {

libavcodec/get_bits.h:394:5: 
  392.                    const uint8_t *buffer, int bit_size)
  393. {
  394.     int buffer_size = (bit_size+7)>>3;
           ^
  395.     if (buffer_size < 0 || bit_size < 0) {
  396.         buffer_size = bit_size = 0;

libavcodec/get_bits.h:395:9: Taking true branch
  393. {
  394.     int buffer_size = (bit_size+7)>>3;
  395.     if (buffer_size < 0 || bit_size < 0) {
               ^
  396.         buffer_size = bit_size = 0;
  397.         buffer = NULL;

libavcodec/get_bits.h:396:9: 
  394.     int buffer_size = (bit_size+7)>>3;
  395.     if (buffer_size < 0 || bit_size < 0) {
  396.         buffer_size = bit_size = 0;
               ^
  397.         buffer = NULL;
  398.     }

libavcodec/get_bits.h:397:9: 
  395.     if (buffer_size < 0 || bit_size < 0) {
  396.         buffer_size = bit_size = 0;
  397.         buffer = NULL;
               ^
  398.     }
  399. 

libavcodec/get_bits.h:400:5: 
  398.     }
  399. 
  400.     s->buffer       = buffer;
           ^
  401.     s->size_in_bits = bit_size;
  402.     s->buffer_end   = buffer + buffer_size;

libavcodec/get_bits.h:401:5: 
  399. 
  400.     s->buffer       = buffer;
  401.     s->size_in_bits = bit_size;
           ^
  402.     s->buffer_end   = buffer + buffer_size;
  403. #ifdef ALT_BITSTREAM_READER

libavcodec/get_bits.h:402:5: 
  400.     s->buffer       = buffer;
  401.     s->size_in_bits = bit_size;
  402.     s->buffer_end   = buffer + buffer_size;
           ^
  403. #ifdef ALT_BITSTREAM_READER
  404.     s->index        = 0;

libavcodec/get_bits.h:404:5: 
  402.     s->buffer_end   = buffer + buffer_size;
  403. #ifdef ALT_BITSTREAM_READER
  404.     s->index        = 0;
           ^
  405. #elif defined A32_BITSTREAM_READER
  406.     s->buffer_ptr   = (uint32_t*)((intptr_t)buffer & ~3);

libavcodec/get_bits.h:410:1: return from a call to init_get_bits
  408.     skip_bits_long(s, 0);
  409. #endif
  410. }
       ^
  411. 
  412. static inline void align_get_bits(GetBitContext *s)

libavcodec/aacdec.c:473:9: Taking false branch
471.     init_get_bits(&gb, data, data_size * 8);
472. 
473.     if ((i = ff_mpeg4audio_get_config(m4ac, data, data_size)) < 0)
             ^
474.         return -1;
475.     if (m4ac->sampling_index > 12) {

libavcodec/aacdec.c:475:9: Taking false branch
473.     if ((i = ff_mpeg4audio_get_config(m4ac, data, data_size)) < 0)
474.         return -1;
475.     if (m4ac->sampling_index > 12) {
             ^
476.         av_log(avctx, AV_LOG_ERROR, "invalid sampling rate index %d\n", m4ac->sampling_index);
477.         return -1;

libavcodec/aacdec.c:479:9: Taking true branch
477.         return -1;
478.     }
479.     if (m4ac->sbr == 1 && m4ac->ps == -1)
             ^
480.         m4ac->ps = 1;
481. 

libavcodec/aacdec.c:479:27: Taking false branch
477.         return -1;
478.     }
479.     if (m4ac->sbr == 1 && m4ac->ps == -1)
                               ^
480.         m4ac->ps = 1;
481. 

libavcodec/aacdec.c:482:5: 
480.         m4ac->ps = 1;
481. 
482.     skip_bits_long(&gb, i);
         ^
483. 
484.     switch (m4ac->object_type) {

libavcodec/get_bits.h:173:1: start of procedure skip_bits_long()
  171. }
  172. 
  173. static inline void skip_bits_long(GetBitContext *s, int n){
       ^
  174.     s->index += n;
  175. }

libavcodec/get_bits.h:174:5: 
  172. 
  173. static inline void skip_bits_long(GetBitContext *s, int n){
  174.     s->index += n;
           ^
  175. }
  176. 

libavcodec/get_bits.h:175:1: return from a call to skip_bits_long
  173. static inline void skip_bits_long(GetBitContext *s, int n){
  174.     s->index += n;
  175. }
       ^
  176. 
  177. #elif defined A32_BITSTREAM_READER

libavcodec/aacdec.c:484:5: 
482.     skip_bits_long(&gb, i);
483. 
484.     switch (m4ac->object_type) {
         ^
485.     case AOT_AAC_MAIN:
486.     case AOT_AAC_LC:

libavcodec/aacdec.c:485:5: Switch condition is true. Entering switch case
483. 
484.     switch (m4ac->object_type) {
485.     case AOT_AAC_MAIN:
         ^
486.     case AOT_AAC_LC:
487.     case AOT_AAC_LTP:

libavcodec/aacdec.c:488:13: 
486.     case AOT_AAC_LC:
487.     case AOT_AAC_LTP:
488.         if (decode_ga_specific_config(ac, avctx, &gb, m4ac, m4ac->chan_config))
                 ^
489.             return -1;
490.         break;
