libavformat/nsvdec.c:324: error: Null Dereference
  pointer `p` last assigned on line 320 could be null and is dereferenced at line 324, column 20.

libavformat/nsvdec.c:276:1: start of procedure nsv_parse_NSVf_header()
274. }
275. 
276. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
277. {
278.     NSVContext *nsv = s->priv_data;

libavformat/nsvdec.c:278:5: 
276. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
277. {
278.     NSVContext *nsv = s->priv_data;
         ^
279.     ByteIOContext *pb = s->pb;
280.     unsigned int file_size, size;

libavformat/nsvdec.c:279:5: 
277. {
278.     NSVContext *nsv = s->priv_data;
279.     ByteIOContext *pb = s->pb;
         ^
280.     unsigned int file_size, size;
281.     int64_t duration;

libavformat/nsvdec.c:288:5: 
286.     PRINT(("%s()\n", __FUNCTION__));
287. 
288.     nsv->state = NSV_UNSYNC; /* in case we fail */
         ^
289. 
290.     size = get_le32(pb);

libavformat/nsvdec.c:290:5: 
288.     nsv->state = NSV_UNSYNC; /* in case we fail */
289. 
290.     size = get_le32(pb);
         ^
291.     if (size < 28)
292.         return -1;

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:291:9: Taking false branch
289. 
290.     size = get_le32(pb);
291.     if (size < 28)
             ^
292.         return -1;
293.     nsv->NSVf_end = size;

libavformat/nsvdec.c:293:5: 
291.     if (size < 28)
292.         return -1;
293.     nsv->NSVf_end = size;
         ^
294. 
295.     //s->file_size = (uint32_t)get_le32(pb);

libavformat/nsvdec.c:296:5: 
294. 
295.     //s->file_size = (uint32_t)get_le32(pb);
296.     file_size = (uint32_t)get_le32(pb);
         ^
297.     PRINT(("NSV NSVf chunk_size %u\n", size));
298.     PRINT(("NSV NSVf file_size %u\n", file_size));

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:300:5: 
298.     PRINT(("NSV NSVf file_size %u\n", file_size));
299. 
300.     nsv->duration = duration = get_le32(pb); /* in ms */
         ^
301.     PRINT(("NSV NSVf duration %"PRId64" ms\n", duration));
302.     // XXX: store it in AVStreams

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:304:5: 
302.     // XXX: store it in AVStreams
303. 
304.     strings_size = get_le32(pb);
         ^
305.     table_entries = get_le32(pb);
306.     table_entries_used = get_le32(pb);

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:305:5: 
303. 
304.     strings_size = get_le32(pb);
305.     table_entries = get_le32(pb);
         ^
306.     table_entries_used = get_le32(pb);
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:306:5: 
304.     strings_size = get_le32(pb);
305.     table_entries = get_le32(pb);
306.     table_entries_used = get_le32(pb);
         ^
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));

libavformat/aviobuf.c:456:1: start of procedure get_le32()
  454. }
  455. 
  456. unsigned int get_le32(ByteIOContext *s)
       ^
  457. {
  458.     unsigned int val;

libavformat/aviobuf.c:459:5: 
  457. {
  458.     unsigned int val;
  459.     val = get_le16(s);
           ^
  460.     val |= get_le16(s) << 16;
  461.     return val;

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:460:5: 
  458.     unsigned int val;
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
           ^
  461.     return val;
  462. }

libavformat/aviobuf.c:440:1: start of procedure get_le16()
    438. }
    439. 
    440. unsigned int get_le16(ByteIOContext *s)
         ^
    441. {
    442.     unsigned int val;

libavformat/aviobuf.c:443:5: 
    441. {
    442.     unsigned int val;
    443.     val = get_byte(s);
             ^
    444.     val |= get_byte(s) << 8;
    445.     return val;

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:444:5: 
    442.     unsigned int val;
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
             ^
    445.     return val;
    446. }

libavformat/aviobuf.c:352:1: start of procedure get_byte()
      350. 
      351. /* XXX: put an inline version */
      352. int get_byte(ByteIOContext *s)
           ^
      353. {
      354.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:354:9: Taking true branch
      352. int get_byte(ByteIOContext *s)
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
                   ^
      355.         return *s->buf_ptr++;
      356.     } else {

libavformat/aviobuf.c:355:9: 
      353. {
      354.     if (s->buf_ptr < s->buf_end) {
      355.         return *s->buf_ptr++;
                   ^
      356.     } else {
      357.         fill_buffer(s);

libavformat/aviobuf.c:363:1: return from a call to get_byte
      361.             return 0;
      362.     }
      363. }
           ^
      364. 
      365. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:445:5: 
    443.     val = get_byte(s);
    444.     val |= get_byte(s) << 8;
    445.     return val;
             ^
    446. }
    447. 

libavformat/aviobuf.c:446:1: return from a call to get_le16
    444.     val |= get_byte(s) << 8;
    445.     return val;
    446. }
         ^
    447. 
    448. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:461:5: 
  459.     val = get_le16(s);
  460.     val |= get_le16(s) << 16;
  461.     return val;
           ^
  462. }
  463. 

libavformat/aviobuf.c:462:1: return from a call to get_le32
  460.     val |= get_le16(s) << 16;
  461.     return val;
  462. }
       ^
  463. 
  464. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:309:9: 
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));
309.     if (url_feof(pb))
             ^
310.         return -1;
311. 

libavformat/aviobuf.c:210:1: start of procedure url_feof()
  208. }
  209. 
  210. int url_feof(ByteIOContext *s)
       ^
  211. {
  212.     if(!s)

libavformat/aviobuf.c:212:9: Taking false branch
  210. int url_feof(ByteIOContext *s)
  211. {
  212.     if(!s)
               ^
  213.         return 0;
  214.     return s->eof_reached;

libavformat/aviobuf.c:214:5: 
  212.     if(!s)
  213.         return 0;
  214.     return s->eof_reached;
           ^
  215. }
  216. 

libavformat/aviobuf.c:215:1: return from a call to url_feof
  213.         return 0;
  214.     return s->eof_reached;
  215. }
       ^
  216. 
  217. int url_ferror(ByteIOContext *s)

libavformat/nsvdec.c:309:9: Taking false branch
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));
309.     if (url_feof(pb))
             ^
310.         return -1;
311. 

libavformat/nsvdec.c:314:9: Taking true branch
312.     PRINT(("NSV got header; filepos %"PRId64"\n", url_ftell(pb)));
313. 
314.     if (strings_size > 0) {
             ^
315.         char *strings; /* last byte will be '\0' to play safe with str*() */
316.         char *p, *endp;

libavformat/nsvdec.c:320:9: 
318.         char quote;
319. 
320.         p = strings = av_mallocz(strings_size + 1);
             ^
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);

libavutil/mem.c:139:1: start of procedure av_mallocz()
  137. }
  138. 
  139. void *av_mallocz(unsigned int size)
       ^
  140. {
  141.     void *ptr = av_malloc(size);

libavutil/mem.c:141:5: 
  139. void *av_mallocz(unsigned int size)
  140. {
  141.     void *ptr = av_malloc(size);
           ^
  142.     if (ptr)
  143.         memset(ptr, 0, size);

libavutil/mem.c:47:1: start of procedure av_malloc()
    45.    linker will do it automatically. */
    46. 
    47. void *av_malloc(unsigned int size)
        ^
    48. {
    49.     void *ptr = NULL;

libavutil/mem.c:49:5: 
    47. void *av_malloc(unsigned int size)
    48. {
    49.     void *ptr = NULL;
            ^
    50. #if CONFIG_MEMALIGN_HACK
    51.     long diff;

libavutil/mem.c:55:8: Taking true branch
    53. 
    54.     /* let's disallow possible ambiguous cases */
    55.     if(size > (INT_MAX-16) )
               ^
    56.         return NULL;
    57. 

libavutil/mem.c:56:9: 
    54.     /* let's disallow possible ambiguous cases */
    55.     if(size > (INT_MAX-16) )
    56.         return NULL;
                ^
    57. 
    58. #if CONFIG_MEMALIGN_HACK

libavutil/mem.c:99:1: return from a call to av_malloc
     97. #endif
     98.     return ptr;
     99. }
         ^
    100. 
    101. void *av_realloc(void *ptr, unsigned int size)

libavutil/mem.c:142:9: Taking false branch
  140. {
  141.     void *ptr = av_malloc(size);
  142.     if (ptr)
               ^
  143.         memset(ptr, 0, size);
  144.     return ptr;

libavutil/mem.c:144:5: 
  142.     if (ptr)
  143.         memset(ptr, 0, size);
  144.     return ptr;
           ^
  145. }
  146. 

libavutil/mem.c:145:1: return from a call to av_mallocz
  143.         memset(ptr, 0, size);
  144.     return ptr;
  145. }
       ^
  146. 
  147. char *av_strdup(const char *s)

libavformat/nsvdec.c:321:9: 
319. 
320.         p = strings = av_mallocz(strings_size + 1);
321.         endp = strings + strings_size;
             ^
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {

libavformat/nsvdec.c:322:9: Skipping get_buffer(): empty list of specs
320.         p = strings = av_mallocz(strings_size + 1);
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);
             ^
323.         while (p < endp) {
324.             while (*p == ' ')

libavformat/nsvdec.c:323:16: Loop condition is true. Entering loop body
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {
                    ^
324.             while (*p == ' ')
325.                 p++; /* strip out spaces */

libavformat/nsvdec.c:324:20: 
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {
324.             while (*p == ' ')
                        ^
325.                 p++; /* strip out spaces */
326.             if (p >= endp-2)
