libavformat/nsvdec.c:314: error: Null Dereference
  pointer `p` last assigned on line 310 could be null and is dereferenced at line 314, column 20.

libavformat/nsvdec.c:266:1: start of procedure nsv_parse_NSVf_header()
264. }
265. 
266. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
267. {
268.     NSVContext *nsv = s->priv_data;

libavformat/nsvdec.c:268:5: 
266. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
267. {
268.     NSVContext *nsv = s->priv_data;
         ^
269.     AVIOContext *pb = s->pb;
270.     unsigned int file_size, size;

libavformat/nsvdec.c:269:5: 
267. {
268.     NSVContext *nsv = s->priv_data;
269.     AVIOContext *pb = s->pb;
         ^
270.     unsigned int file_size, size;
271.     int64_t duration;

libavformat/nsvdec.c:278:5: 
276.     av_dlog(s, "%s()\n", __FUNCTION__);
277. 
278.     nsv->state = NSV_UNSYNC; /* in case we fail */
         ^
279. 
280.     size = avio_rl32(pb);

libavformat/nsvdec.c:280:5: 
278.     nsv->state = NSV_UNSYNC; /* in case we fail */
279. 
280.     size = avio_rl32(pb);
         ^
281.     if (size < 28)
282.         return -1;

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:281:9: Taking false branch
279. 
280.     size = avio_rl32(pb);
281.     if (size < 28)
             ^
282.         return -1;
283.     nsv->NSVf_end = size;

libavformat/nsvdec.c:283:5: 
281.     if (size < 28)
282.         return -1;
283.     nsv->NSVf_end = size;
         ^
284. 
285.     //s->file_size = (uint32_t)avio_rl32(pb);

libavformat/nsvdec.c:286:5: 
284. 
285.     //s->file_size = (uint32_t)avio_rl32(pb);
286.     file_size = (uint32_t)avio_rl32(pb);
         ^
287.     av_dlog(s, "NSV NSVf chunk_size %u\n", size);
288.     av_dlog(s, "NSV NSVf file_size %u\n", file_size);

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:290:5: 
288.     av_dlog(s, "NSV NSVf file_size %u\n", file_size);
289. 
290.     nsv->duration = duration = avio_rl32(pb); /* in ms */
         ^
291.     av_dlog(s, "NSV NSVf duration %"PRId64" ms\n", duration);
292.     // XXX: store it in AVStreams

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:294:5: 
292.     // XXX: store it in AVStreams
293. 
294.     strings_size = avio_rl32(pb);
         ^
295.     table_entries = avio_rl32(pb);
296.     table_entries_used = avio_rl32(pb);

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:295:5: 
293. 
294.     strings_size = avio_rl32(pb);
295.     table_entries = avio_rl32(pb);
         ^
296.     table_entries_used = avio_rl32(pb);
297.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:296:5: 
294.     strings_size = avio_rl32(pb);
295.     table_entries = avio_rl32(pb);
296.     table_entries_used = avio_rl32(pb);
         ^
297.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
298.             strings_size, table_entries, table_entries_used);

libavformat/aviobuf.c:704:1: start of procedure avio_rl32()
  702. }
  703. 
  704. unsigned int avio_rl32(AVIOContext *s)
       ^
  705. {
  706.     unsigned int val;

libavformat/aviobuf.c:707:5: 
  705. {
  706.     unsigned int val;
  707.     val = avio_rl16(s);
           ^
  708.     val |= avio_rl16(s) << 16;
  709.     return val;

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:708:5: 
  706.     unsigned int val;
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
           ^
  709.     return val;
  710. }

libavformat/aviobuf.c:688:1: start of procedure avio_rl16()
    686. }
    687. 
    688. unsigned int avio_rl16(AVIOContext *s)
         ^
    689. {
    690.     unsigned int val;

libavformat/aviobuf.c:691:5: 
    689. {
    690.     unsigned int val;
    691.     val = avio_r8(s);
             ^
    692.     val |= avio_r8(s) << 8;
    693.     return val;

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:692:5: 
    690.     unsigned int val;
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
             ^
    693.     return val;
    694. }

libavformat/aviobuf.c:598:1: start of procedure avio_r8()
      596. 
      597. /* XXX: put an inline version */
      598. int avio_r8(AVIOContext *s)
           ^
      599. {
      600.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:600:9: Taking false branch
      598. int avio_r8(AVIOContext *s)
      599. {
      600.     if (s->buf_ptr >= s->buf_end)
                   ^
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:602:9: Taking true branch
      600.     if (s->buf_ptr >= s->buf_end)
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
                   ^
      603.         return *s->buf_ptr++;
      604.     return 0;

libavformat/aviobuf.c:603:9: 
      601.         fill_buffer(s);
      602.     if (s->buf_ptr < s->buf_end)
      603.         return *s->buf_ptr++;
                   ^
      604.     return 0;
      605. }

libavformat/aviobuf.c:605:1: return from a call to avio_r8
      603.         return *s->buf_ptr++;
      604.     return 0;
      605. }
           ^
      606. 
      607. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:693:5: 
    691.     val = avio_r8(s);
    692.     val |= avio_r8(s) << 8;
    693.     return val;
             ^
    694. }
    695. 

libavformat/aviobuf.c:694:1: return from a call to avio_rl16
    692.     val |= avio_r8(s) << 8;
    693.     return val;
    694. }
         ^
    695. 
    696. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:709:5: 
  707.     val = avio_rl16(s);
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
           ^
  710. }
  711. 

libavformat/aviobuf.c:710:1: return from a call to avio_rl32
  708.     val |= avio_rl16(s) << 16;
  709.     return val;
  710. }
       ^
  711. 
  712. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:299:9: Taking false branch
297.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
298.             strings_size, table_entries, table_entries_used);
299.     if (pb->eof_reached)
             ^
300.         return -1;
301. 

libavformat/nsvdec.c:304:9: Taking true branch
302.     av_dlog(s, "NSV got header; filepos %"PRId64"\n", avio_tell(pb));
303. 
304.     if (strings_size > 0) {
             ^
305.         char *strings; /* last byte will be '\0' to play safe with str*() */
306.         char *p, *endp;

libavformat/nsvdec.c:310:9: 
308.         char quote;
309. 
310.         p = strings = av_mallocz(strings_size + 1);
             ^
311.         endp = strings + strings_size;
312.         avio_read(pb, strings, strings_size);

libavutil/mem.c:156:1: start of procedure av_mallocz()
  154. }
  155. 
  156. void *av_mallocz(size_t size)
       ^
  157. {
  158.     void *ptr = av_malloc(size);

libavutil/mem.c:158:5: 
  156. void *av_mallocz(size_t size)
  157. {
  158.     void *ptr = av_malloc(size);
           ^
  159.     if (ptr)
  160.         memset(ptr, 0, size);

libavutil/mem.c:64:1: start of procedure av_malloc()
    62.    linker will do it automatically. */
    63. 
    64. void *av_malloc(size_t size)
        ^
    65. {
    66.     void *ptr = NULL;

libavutil/mem.c:66:5: 
    64. void *av_malloc(size_t size)
    65. {
    66.     void *ptr = NULL;
            ^
    67. #if CONFIG_MEMALIGN_HACK
    68.     long diff;

libavutil/mem.c:72:8: Taking true branch
    70. 
    71.     /* let's disallow possible ambiguous cases */
    72.     if(size > (INT_MAX-16) )
               ^
    73.         return NULL;
    74. 

libavutil/mem.c:73:9: 
    71.     /* let's disallow possible ambiguous cases */
    72.     if(size > (INT_MAX-16) )
    73.         return NULL;
                ^
    74. 
    75. #if CONFIG_MEMALIGN_HACK

libavutil/mem.c:117:1: return from a call to av_malloc
    115. #endif
    116.     return ptr;
    117. }
         ^
    118. 
    119. void *av_realloc(void *ptr, size_t size)

libavutil/mem.c:159:9: Taking false branch
  157. {
  158.     void *ptr = av_malloc(size);
  159.     if (ptr)
               ^
  160.         memset(ptr, 0, size);
  161.     return ptr;

libavutil/mem.c:161:5: 
  159.     if (ptr)
  160.         memset(ptr, 0, size);
  161.     return ptr;
           ^
  162. }
  163. 

libavutil/mem.c:162:1: return from a call to av_mallocz
  160.         memset(ptr, 0, size);
  161.     return ptr;
  162. }
       ^
  163. 
  164. char *av_strdup(const char *s)

libavformat/nsvdec.c:311:9: 
309. 
310.         p = strings = av_mallocz(strings_size + 1);
311.         endp = strings + strings_size;
             ^
312.         avio_read(pb, strings, strings_size);
313.         while (p < endp) {

libavformat/nsvdec.c:312:9: Skipping avio_read(): empty list of specs
310.         p = strings = av_mallocz(strings_size + 1);
311.         endp = strings + strings_size;
312.         avio_read(pb, strings, strings_size);
             ^
313.         while (p < endp) {
314.             while (*p == ' ')

libavformat/nsvdec.c:313:16: Loop condition is true. Entering loop body
311.         endp = strings + strings_size;
312.         avio_read(pb, strings, strings_size);
313.         while (p < endp) {
                    ^
314.             while (*p == ' ')
315.                 p++; /* strip out spaces */

libavformat/nsvdec.c:314:20: 
312.         avio_read(pb, strings, strings_size);
313.         while (p < endp) {
314.             while (*p == ' ')
                        ^
315.                 p++; /* strip out spaces */
316.             if (p >= endp-2)
