libavformat/nutdec.c:206: error: Null Dereference
  pointer `nut->time_base` last assigned on line 203 could be null and is dereferenced at line 206, column 9.

libavformat/nutdec.c:182:1: start of procedure decode_main_header()
180. }
181. 
182. static int decode_main_header(NUTContext *nut){
     ^
183.     AVFormatContext *s= nut->avf;
184.     ByteIOContext *bc = s->pb;

libavformat/nutdec.c:183:5: 
181. 
182. static int decode_main_header(NUTContext *nut){
183.     AVFormatContext *s= nut->avf;
         ^
184.     ByteIOContext *bc = s->pb;
185.     uint64_t tmp, end;

libavformat/nutdec.c:184:5: 
182. static int decode_main_header(NUTContext *nut){
183.     AVFormatContext *s= nut->avf;
184.     ByteIOContext *bc = s->pb;
         ^
185.     uint64_t tmp, end;
186.     unsigned int stream_count;

libavformat/nutdec.c:190:5: Skipping get_packetheader(): empty list of specs
188.     int64_t tmp_match;
189. 
190.     end= get_packetheader(nut, bc, 1, MAIN_STARTCODE);
         ^
191.     end += url_ftell(bc);
192. 

libavformat/nutdec.c:191:5: 
189. 
190.     end= get_packetheader(nut, bc, 1, MAIN_STARTCODE);
191.     end += url_ftell(bc);
         ^
192. 
193.     GET_V(tmp              , tmp >=2 && tmp <= 3)

libavformat/aviobuf.c:184:1: start of procedure url_ftell()
  182. }
  183. 
  184. offset_t url_ftell(ByteIOContext *s)
       ^
  185. {
  186.     return url_fseek(s, 0, SEEK_CUR);

libavformat/aviobuf.c:186:5: Skipping url_fseek(): empty list of specs
  184. offset_t url_ftell(ByteIOContext *s)
  185. {
  186.     return url_fseek(s, 0, SEEK_CUR);
           ^
  187. }
  188. 

libavformat/aviobuf.c:187:1: return from a call to url_ftell
  185. {
  186.     return url_fseek(s, 0, SEEK_CUR);
  187. }
       ^
  188. 
  189. offset_t url_fsize(ByteIOContext *s)

libavformat/nutdec.c:193:5: Taking false branch
191.     end += url_ftell(bc);
192. 
193.     GET_V(tmp              , tmp >=2 && tmp <= 3)
         ^
194.     GET_V(stream_count     , tmp > 0 && tmp <=MAX_STREAMS)
195. 

libavformat/nutdec.c:193:5: Taking false branch
191.     end += url_ftell(bc);
192. 
193.     GET_V(tmp              , tmp >=2 && tmp <= 3)
         ^
194.     GET_V(stream_count     , tmp > 0 && tmp <=MAX_STREAMS)
195. 

libavformat/nutdec.c:194:5: Taking false branch
192. 
193.     GET_V(tmp              , tmp >=2 && tmp <= 3)
194.     GET_V(stream_count     , tmp > 0 && tmp <=MAX_STREAMS)
         ^
195. 
196.     nut->max_distance = ff_get_v(bc);

libavformat/nutdec.c:194:5: Taking false branch
192. 
193.     GET_V(tmp              , tmp >=2 && tmp <= 3)
194.     GET_V(stream_count     , tmp > 0 && tmp <=MAX_STREAMS)
         ^
195. 
196.     nut->max_distance = ff_get_v(bc);

libavformat/nutdec.c:196:5: Skipping ff_get_v(): empty list of specs
194.     GET_V(stream_count     , tmp > 0 && tmp <=MAX_STREAMS)
195. 
196.     nut->max_distance = ff_get_v(bc);
         ^
197.     if(nut->max_distance > 65536){
198.         av_log(s, AV_LOG_DEBUG, "max_distance %d\n", nut->max_distance);

libavformat/nutdec.c:197:8: Taking true branch
195. 
196.     nut->max_distance = ff_get_v(bc);
197.     if(nut->max_distance > 65536){
            ^
198.         av_log(s, AV_LOG_DEBUG, "max_distance %d\n", nut->max_distance);
199.         nut->max_distance= 65536;

libavformat/nutdec.c:198:9: Skipping av_log(): empty list of specs
196.     nut->max_distance = ff_get_v(bc);
197.     if(nut->max_distance > 65536){
198.         av_log(s, AV_LOG_DEBUG, "max_distance %d\n", nut->max_distance);
             ^
199.         nut->max_distance= 65536;
200.     }

libavformat/nutdec.c:199:9: 
197.     if(nut->max_distance > 65536){
198.         av_log(s, AV_LOG_DEBUG, "max_distance %d\n", nut->max_distance);
199.         nut->max_distance= 65536;
             ^
200.     }
201. 

libavformat/nutdec.c:202:5: Taking false branch
200.     }
201. 
202.     GET_V(nut->time_base_count, tmp>0 && tmp<INT_MAX / sizeof(AVRational))
         ^
203.     nut->time_base= av_malloc(nut->time_base_count * sizeof(AVRational));
204. 

libavformat/nutdec.c:202:5: Taking false branch
200.     }
201. 
202.     GET_V(nut->time_base_count, tmp>0 && tmp<INT_MAX / sizeof(AVRational))
         ^
203.     nut->time_base= av_malloc(nut->time_base_count * sizeof(AVRational));
204. 

libavformat/nutdec.c:203:5: 
201. 
202.     GET_V(nut->time_base_count, tmp>0 && tmp<INT_MAX / sizeof(AVRational))
203.     nut->time_base= av_malloc(nut->time_base_count * sizeof(AVRational));
         ^
204. 
205.     for(i=0; i<nut->time_base_count; i++){

libavutil/mem.c:42:1: start of procedure av_malloc()
  40.    linker will do it automatically */
  41. 
  42. void *av_malloc(unsigned int size)
      ^
  43. {
  44.     void *ptr;

libavutil/mem.c:50:8: Taking true branch
  48. 
  49.     /* let's disallow possible ambiguous cases */
  50.     if(size > (INT_MAX-16) )
             ^
  51.         return NULL;
  52. 

libavutil/mem.c:51:9: 
  49.     /* let's disallow possible ambiguous cases */
  50.     if(size > (INT_MAX-16) )
  51.         return NULL;
              ^
  52. 
  53. #ifdef CONFIG_MEMALIGN_HACK

libavutil/mem.c:92:1: return from a call to av_malloc
  90. #endif
  91.     return ptr;
  92. }
      ^
  93. 
  94. void *av_realloc(void *ptr, unsigned int size)

libavformat/nutdec.c:205:9: 
203.     nut->time_base= av_malloc(nut->time_base_count * sizeof(AVRational));
204. 
205.     for(i=0; i<nut->time_base_count; i++){
             ^
206.         GET_V(nut->time_base[i].num, tmp>0 && tmp<(1ULL<<31))
207.         GET_V(nut->time_base[i].den, tmp>0 && tmp<(1ULL<<31))

libavformat/nutdec.c:205:14: Loop condition is true. Entering loop body
203.     nut->time_base= av_malloc(nut->time_base_count * sizeof(AVRational));
204. 
205.     for(i=0; i<nut->time_base_count; i++){
                  ^
206.         GET_V(nut->time_base[i].num, tmp>0 && tmp<(1ULL<<31))
207.         GET_V(nut->time_base[i].den, tmp>0 && tmp<(1ULL<<31))

libavformat/nutdec.c:206:9: Taking false branch
204. 
205.     for(i=0; i<nut->time_base_count; i++){
206.         GET_V(nut->time_base[i].num, tmp>0 && tmp<(1ULL<<31))
             ^
207.         GET_V(nut->time_base[i].den, tmp>0 && tmp<(1ULL<<31))
208.         if(ff_gcd(nut->time_base[i].num, nut->time_base[i].den) != 1){

libavformat/nutdec.c:206:9: Taking false branch
204. 
205.     for(i=0; i<nut->time_base_count; i++){
206.         GET_V(nut->time_base[i].num, tmp>0 && tmp<(1ULL<<31))
             ^
207.         GET_V(nut->time_base[i].den, tmp>0 && tmp<(1ULL<<31))
208.         if(ff_gcd(nut->time_base[i].num, nut->time_base[i].den) != 1){
