libavcodec/xan.c:115: error: Null Dereference
  pointer `&gb->buffer` last assigned on line 112 could be null and is dereferenced by call to `get_bits1()` at line 115, column 37.

libavcodec/xan.c:98:1: start of procedure xan_huffman_decode()
 96. }
 97. 
 98. static int xan_huffman_decode(unsigned char *dest, int dest_len,
     ^
 99.                               const unsigned char *src, int src_len)
100. {

libavcodec/xan.c:101:5: 
 99.                               const unsigned char *src, int src_len)
100. {
101.     unsigned char byte = *src++;
         ^
102.     unsigned char ival = byte + 0x16;
103.     const unsigned char * ptr = src + byte*2;

libavcodec/xan.c:102:5: 
100. {
101.     unsigned char byte = *src++;
102.     unsigned char ival = byte + 0x16;
         ^
103.     const unsigned char * ptr = src + byte*2;
104.     int ptr_len = src_len - 1 - byte*2;

libavcodec/xan.c:103:5: 
101.     unsigned char byte = *src++;
102.     unsigned char ival = byte + 0x16;
103.     const unsigned char * ptr = src + byte*2;
         ^
104.     int ptr_len = src_len - 1 - byte*2;
105.     unsigned char val = ival;

libavcodec/xan.c:104:5: 
102.     unsigned char ival = byte + 0x16;
103.     const unsigned char * ptr = src + byte*2;
104.     int ptr_len = src_len - 1 - byte*2;
         ^
105.     unsigned char val = ival;
106.     unsigned char *dest_end = dest + dest_len;

libavcodec/xan.c:105:5: 
103.     const unsigned char * ptr = src + byte*2;
104.     int ptr_len = src_len - 1 - byte*2;
105.     unsigned char val = ival;
         ^
106.     unsigned char *dest_end = dest + dest_len;
107.     GetBitContext gb;

libavcodec/xan.c:106:5: 
104.     int ptr_len = src_len - 1 - byte*2;
105.     unsigned char val = ival;
106.     unsigned char *dest_end = dest + dest_len;
         ^
107.     GetBitContext gb;
108. 

libavcodec/xan.c:109:9: Taking false branch
107.     GetBitContext gb;
108. 
109.     if (ptr_len < 0)
             ^
110.         return AVERROR_INVALIDDATA;
111. 

libavcodec/xan.c:112:5: 
110.         return AVERROR_INVALIDDATA;
111. 
112.     init_get_bits(&gb, ptr, ptr_len * 8);
         ^
113. 
114.     while (val != 0x16) {

libavcodec/get_bits.h:339:1: start of procedure init_get_bits()
  337.  * @param bit_size the size of the buffer in bits
  338.  */
  339. static inline void init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  340.                                  int bit_size)
  341. {

libavcodec/get_bits.h:342:5: 
  340.                                  int bit_size)
  341. {
  342.     int buffer_size = (bit_size+7)>>3;
           ^
  343.     if (buffer_size < 0 || bit_size < 0) {
  344.         buffer_size = bit_size = 0;

libavcodec/get_bits.h:343:9: Taking true branch
  341. {
  342.     int buffer_size = (bit_size+7)>>3;
  343.     if (buffer_size < 0 || bit_size < 0) {
               ^
  344.         buffer_size = bit_size = 0;
  345.         buffer = NULL;

libavcodec/get_bits.h:344:9: 
  342.     int buffer_size = (bit_size+7)>>3;
  343.     if (buffer_size < 0 || bit_size < 0) {
  344.         buffer_size = bit_size = 0;
               ^
  345.         buffer = NULL;
  346.     }

libavcodec/get_bits.h:345:9: 
  343.     if (buffer_size < 0 || bit_size < 0) {
  344.         buffer_size = bit_size = 0;
  345.         buffer = NULL;
               ^
  346.     }
  347. 

libavcodec/get_bits.h:348:5: 
  346.     }
  347. 
  348.     s->buffer       = buffer;
           ^
  349.     s->size_in_bits = bit_size;
  350. #if !UNCHECKED_BITSTREAM_READER

libavcodec/get_bits.h:349:5: 
  347. 
  348.     s->buffer       = buffer;
  349.     s->size_in_bits = bit_size;
           ^
  350. #if !UNCHECKED_BITSTREAM_READER
  351.     s->size_in_bits_plus8 = bit_size + 8;

libavcodec/get_bits.h:351:5: 
  349.     s->size_in_bits = bit_size;
  350. #if !UNCHECKED_BITSTREAM_READER
  351.     s->size_in_bits_plus8 = bit_size + 8;
           ^
  352. #endif
  353.     s->buffer_end   = buffer + buffer_size;

libavcodec/get_bits.h:353:5: 
  351.     s->size_in_bits_plus8 = bit_size + 8;
  352. #endif
  353.     s->buffer_end   = buffer + buffer_size;
           ^
  354.     s->index        = 0;
  355. }

libavcodec/get_bits.h:354:5: 
  352. #endif
  353.     s->buffer_end   = buffer + buffer_size;
  354.     s->index        = 0;
           ^
  355. }
  356. 

libavcodec/get_bits.h:355:1: return from a call to init_get_bits
  353.     s->buffer_end   = buffer + buffer_size;
  354.     s->index        = 0;
  355. }
       ^
  356. 
  357. static inline void align_get_bits(GetBitContext *s)

libavcodec/xan.c:114:12: Loop condition is true. Entering loop body
112.     init_get_bits(&gb, ptr, ptr_len * 8);
113. 
114.     while (val != 0x16) {
                ^
115.         unsigned idx = val - 0x17 + get_bits1(&gb) * byte;
116.         if (idx >= 2 * byte)

libavcodec/xan.c:115:9: 
113. 
114.     while (val != 0x16) {
115.         unsigned idx = val - 0x17 + get_bits1(&gb) * byte;
             ^
116.         if (idx >= 2 * byte)
117.             return -1;

libavcodec/get_bits.h:255:1: start of procedure get_bits1()
  253. }
  254. 
  255. static inline unsigned int get_bits1(GetBitContext *s)
       ^
  256. {
  257.     unsigned int index = s->index;

libavcodec/get_bits.h:257:5: 
  255. static inline unsigned int get_bits1(GetBitContext *s)
  256. {
  257.     unsigned int index = s->index;
           ^
  258.     uint8_t result = s->buffer[index>>3];
  259. #ifdef BITSTREAM_READER_LE

libavcodec/get_bits.h:258:5: 
  256. {
  257.     unsigned int index = s->index;
  258.     uint8_t result = s->buffer[index>>3];
           ^
  259. #ifdef BITSTREAM_READER_LE
  260.     result >>= index & 7;
