libavformat/nsvdec.c:321: error: Null Dereference
  pointer `p` last assigned on line 317 could be null and is dereferenced at line 321, column 20.

libavformat/nsvdec.c:272:1: start of procedure nsv_parse_NSVf_header()
270. }
271. 
272. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
273. {
274.     NSVContext *nsv = s->priv_data;

libavformat/nsvdec.c:274:5: 
272. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
273. {
274.     NSVContext *nsv = s->priv_data;
         ^
275.     AVIOContext *pb = s->pb;
276.     unsigned int av_unused file_size;

libavformat/nsvdec.c:275:5: 
273. {
274.     NSVContext *nsv = s->priv_data;
275.     AVIOContext *pb = s->pb;
         ^
276.     unsigned int av_unused file_size;
277.     unsigned int size;

libavformat/nsvdec.c:285:5: 
283.     av_dlog(s, "%s()\n", __FUNCTION__);
284. 
285.     nsv->state = NSV_UNSYNC; /* in case we fail */
         ^
286. 
287.     size = avio_rl32(pb);

libavformat/nsvdec.c:287:5: 
285.     nsv->state = NSV_UNSYNC; /* in case we fail */
286. 
287.     size = avio_rl32(pb);
         ^
288.     if (size < 28)
289.         return -1;

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:288:9: Taking false branch
286. 
287.     size = avio_rl32(pb);
288.     if (size < 28)
             ^
289.         return -1;
290.     nsv->NSVf_end = size;

libavformat/nsvdec.c:290:5: 
288.     if (size < 28)
289.         return -1;
290.     nsv->NSVf_end = size;
         ^
291. 
292.     //s->file_size = (uint32_t)avio_rl32(pb);

libavformat/nsvdec.c:293:5: 
291. 
292.     //s->file_size = (uint32_t)avio_rl32(pb);
293.     file_size = (uint32_t)avio_rl32(pb);
         ^
294.     av_dlog(s, "NSV NSVf chunk_size %u\n", size);
295.     av_dlog(s, "NSV NSVf file_size %u\n", file_size);

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:297:5: 
295.     av_dlog(s, "NSV NSVf file_size %u\n", file_size);
296. 
297.     nsv->duration = duration = avio_rl32(pb); /* in ms */
         ^
298.     av_dlog(s, "NSV NSVf duration %"PRId64" ms\n", duration);
299.     // XXX: store it in AVStreams

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:301:5: 
299.     // XXX: store it in AVStreams
300. 
301.     strings_size = avio_rl32(pb);
         ^
302.     table_entries = avio_rl32(pb);
303.     table_entries_used = avio_rl32(pb);

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:302:5: 
300. 
301.     strings_size = avio_rl32(pb);
302.     table_entries = avio_rl32(pb);
         ^
303.     table_entries_used = avio_rl32(pb);
304.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:303:5: 
301.     strings_size = avio_rl32(pb);
302.     table_entries = avio_rl32(pb);
303.     table_entries_used = avio_rl32(pb);
         ^
304.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
305.             strings_size, table_entries, table_entries_used);

libavformat/aviobuf.c:734:1: start of procedure avio_rl32()
  732. }
  733. 
  734. unsigned int avio_rl32(AVIOContext *s)
       ^
  735. {
  736.     unsigned int val;

libavformat/aviobuf.c:737:5: 
  735. {
  736.     unsigned int val;
  737.     val = avio_rl16(s);
           ^
  738.     val |= avio_rl16(s) << 16;
  739.     return val;

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:738:5: 
  736.     unsigned int val;
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
           ^
  739.     return val;
  740. }

libavformat/aviobuf.c:718:1: start of procedure avio_rl16()
    716. }
    717. 
    718. unsigned int avio_rl16(AVIOContext *s)
         ^
    719. {
    720.     unsigned int val;

libavformat/aviobuf.c:721:5: 
    719. {
    720.     unsigned int val;
    721.     val = avio_r8(s);
             ^
    722.     val |= avio_r8(s) << 8;
    723.     return val;

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:722:5: 
    720.     unsigned int val;
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
             ^
    723.     return val;
    724. }

libavformat/aviobuf.c:628:1: start of procedure avio_r8()
      626. 
      627. /* XXX: put an inline version */
      628. int avio_r8(AVIOContext *s)
           ^
      629. {
      630.     if (s->buf_ptr >= s->buf_end)

libavformat/aviobuf.c:630:9: Taking false branch
      628. int avio_r8(AVIOContext *s)
      629. {
      630.     if (s->buf_ptr >= s->buf_end)
                   ^
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)

libavformat/aviobuf.c:632:9: Taking true branch
      630.     if (s->buf_ptr >= s->buf_end)
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
                   ^
      633.         return *s->buf_ptr++;
      634.     return 0;

libavformat/aviobuf.c:633:9: 
      631.         fill_buffer(s);
      632.     if (s->buf_ptr < s->buf_end)
      633.         return *s->buf_ptr++;
                   ^
      634.     return 0;
      635. }

libavformat/aviobuf.c:635:1: return from a call to avio_r8
      633.         return *s->buf_ptr++;
      634.     return 0;
      635. }
           ^
      636. 
      637. #if FF_API_OLD_AVIO

libavformat/aviobuf.c:723:5: 
    721.     val = avio_r8(s);
    722.     val |= avio_r8(s) << 8;
    723.     return val;
             ^
    724. }
    725. 

libavformat/aviobuf.c:724:1: return from a call to avio_rl16
    722.     val |= avio_r8(s) << 8;
    723.     return val;
    724. }
         ^
    725. 
    726. unsigned int avio_rl24(AVIOContext *s)

libavformat/aviobuf.c:739:5: 
  737.     val = avio_rl16(s);
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
           ^
  740. }
  741. 

libavformat/aviobuf.c:740:1: return from a call to avio_rl32
  738.     val |= avio_rl16(s) << 16;
  739.     return val;
  740. }
       ^
  741. 
  742. uint64_t avio_rl64(AVIOContext *s)

libavformat/nsvdec.c:306:9: Taking false branch
304.     av_dlog(s, "NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
305.             strings_size, table_entries, table_entries_used);
306.     if (pb->eof_reached)
             ^
307.         return -1;
308. 

libavformat/nsvdec.c:311:9: Taking true branch
309.     av_dlog(s, "NSV got header; filepos %"PRId64"\n", avio_tell(pb));
310. 
311.     if (strings_size > 0) {
             ^
312.         char *strings; /* last byte will be '\0' to play safe with str*() */
313.         char *p, *endp;

libavformat/nsvdec.c:317:9: 
315.         char quote;
316. 
317.         p = strings = av_mallocz(strings_size + 1);
             ^
318.         endp = strings + strings_size;
319.         avio_read(pb, strings, strings_size);

libavutil/mem.c:154:1: start of procedure av_mallocz()
  152. }
  153. 
  154. void *av_mallocz(size_t size)
       ^
  155. {
  156.     void *ptr = av_malloc(size);

libavutil/mem.c:156:5: 
  154. void *av_mallocz(size_t size)
  155. {
  156.     void *ptr = av_malloc(size);
           ^
  157.     if (ptr)
  158.         memset(ptr, 0, size);

libavutil/mem.c:64:1: start of procedure av_malloc()
    62.    linker will do it automatically. */
    63. 
    64. void *av_malloc(size_t size)
        ^
    65. {
    66.     void *ptr = NULL;

libavutil/mem.c:66:5: 
    64. void *av_malloc(size_t size)
    65. {
    66.     void *ptr = NULL;
            ^
    67. #if CONFIG_MEMALIGN_HACK
    68.     long diff;

libavutil/mem.c:72:8: Taking true branch
    70. 
    71.     /* let's disallow possible ambiguous cases */
    72.     if(size > (INT_MAX-32) )
               ^
    73.         return NULL;
    74. 

libavutil/mem.c:73:9: 
    71.     /* let's disallow possible ambiguous cases */
    72.     if(size > (INT_MAX-32) )
    73.         return NULL;
                ^
    74. 
    75. #if CONFIG_MEMALIGN_HACK

libavutil/mem.c:115:1: return from a call to av_malloc
    113. #endif
    114.     return ptr;
    115. }
         ^
    116. 
    117. void *av_realloc(void *ptr, size_t size)

libavutil/mem.c:157:9: Taking false branch
  155. {
  156.     void *ptr = av_malloc(size);
  157.     if (ptr)
               ^
  158.         memset(ptr, 0, size);
  159.     return ptr;

libavutil/mem.c:159:5: 
  157.     if (ptr)
  158.         memset(ptr, 0, size);
  159.     return ptr;
           ^
  160. }
  161. 

libavutil/mem.c:160:1: return from a call to av_mallocz
  158.         memset(ptr, 0, size);
  159.     return ptr;
  160. }
       ^
  161. 
  162. char *av_strdup(const char *s)

libavformat/nsvdec.c:318:9: 
316. 
317.         p = strings = av_mallocz(strings_size + 1);
318.         endp = strings + strings_size;
             ^
319.         avio_read(pb, strings, strings_size);
320.         while (p < endp) {

libavformat/nsvdec.c:319:9: Skipping avio_read(): empty list of specs
317.         p = strings = av_mallocz(strings_size + 1);
318.         endp = strings + strings_size;
319.         avio_read(pb, strings, strings_size);
             ^
320.         while (p < endp) {
321.             while (*p == ' ')

libavformat/nsvdec.c:320:16: Loop condition is true. Entering loop body
318.         endp = strings + strings_size;
319.         avio_read(pb, strings, strings_size);
320.         while (p < endp) {
                    ^
321.             while (*p == ' ')
322.                 p++; /* strip out spaces */

libavformat/nsvdec.c:321:20: 
319.         avio_read(pb, strings, strings_size);
320.         while (p < endp) {
321.             while (*p == ' ')
                        ^
322.                 p++; /* strip out spaces */
323.             if (p >= endp-2)
