libavformat/nsvdec.c:324: error: Null Dereference
  pointer `p` last assigned on line 320 could be null and is dereferenced at line 324, column 20.

libavformat/nsvdec.c:276:1: start of procedure nsv_parse_NSVf_header()
274. }
275. 
276. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
277. {
278.     NSVContext *nsv = s->priv_data;

libavformat/nsvdec.c:278:5: 
276. static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
277. {
278.     NSVContext *nsv = s->priv_data;
         ^
279.     ByteIOContext *pb = s->pb;
280.     unsigned int file_size, size;

libavformat/nsvdec.c:279:5: 
277. {
278.     NSVContext *nsv = s->priv_data;
279.     ByteIOContext *pb = s->pb;
         ^
280.     unsigned int file_size, size;
281.     int64_t duration;

libavformat/nsvdec.c:288:5: 
286.     PRINT(("%s()\n", __FUNCTION__));
287. 
288.     nsv->state = NSV_UNSYNC; /* in case we fail */
         ^
289. 
290.     size = get_le32(pb);

libavformat/nsvdec.c:290:5: 
288.     nsv->state = NSV_UNSYNC; /* in case we fail */
289. 
290.     size = get_le32(pb);
         ^
291.     if (size < 28)
292.         return -1;

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:291:9: Taking false branch
289. 
290.     size = get_le32(pb);
291.     if (size < 28)
             ^
292.         return -1;
293.     nsv->NSVf_end = size;

libavformat/nsvdec.c:293:5: 
291.     if (size < 28)
292.         return -1;
293.     nsv->NSVf_end = size;
         ^
294. 
295.     //s->file_size = (uint32_t)get_le32(pb);

libavformat/nsvdec.c:296:5: 
294. 
295.     //s->file_size = (uint32_t)get_le32(pb);
296.     file_size = (uint32_t)get_le32(pb);
         ^
297.     PRINT(("NSV NSVf chunk_size %u\n", size));
298.     PRINT(("NSV NSVf file_size %u\n", file_size));

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:300:5: 
298.     PRINT(("NSV NSVf file_size %u\n", file_size));
299. 
300.     nsv->duration = duration = get_le32(pb); /* in ms */
         ^
301.     PRINT(("NSV NSVf duration %"PRId64" ms\n", duration));
302.     // XXX: store it in AVStreams

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:304:5: 
302.     // XXX: store it in AVStreams
303. 
304.     strings_size = get_le32(pb);
         ^
305.     table_entries = get_le32(pb);
306.     table_entries_used = get_le32(pb);

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:305:5: 
303. 
304.     strings_size = get_le32(pb);
305.     table_entries = get_le32(pb);
         ^
306.     table_entries_used = get_le32(pb);
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:306:5: 
304.     strings_size = get_le32(pb);
305.     table_entries = get_le32(pb);
306.     table_entries_used = get_le32(pb);
         ^
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));

libavformat/aviobuf.c:444:1: start of procedure get_le32()
  442. }
  443. 
  444. unsigned int get_le32(ByteIOContext *s)
       ^
  445. {
  446.     unsigned int val;

libavformat/aviobuf.c:447:5: 
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:448:5: 
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:428:1: start of procedure get_le16()
    426. }
    427. 
    428. unsigned int get_le16(ByteIOContext *s)
         ^
    429. {
    430.     unsigned int val;

libavformat/aviobuf.c:431:5: 
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:432:5: 
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:340:1: start of procedure get_byte()
      338. 
      339. /* XXX: put an inline version */
      340. int get_byte(ByteIOContext *s)
           ^
      341. {
      342.     if (s->buf_ptr < s->buf_end) {

libavformat/aviobuf.c:342:9: Taking true branch
      340. int get_byte(ByteIOContext *s)
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
                   ^
      343.         return *s->buf_ptr++;
      344.     } else {

libavformat/aviobuf.c:343:9: 
      341. {
      342.     if (s->buf_ptr < s->buf_end) {
      343.         return *s->buf_ptr++;
                   ^
      344.     } else {
      345.         fill_buffer(s);

libavformat/aviobuf.c:351:1: return from a call to get_byte
      349.             return 0;
      350.     }
      351. }
           ^
      352. 
      353. int url_fgetc(ByteIOContext *s)

libavformat/aviobuf.c:433:5: 
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:434:1: return from a call to get_le16
    432.     val |= get_byte(s) << 8;
    433.     return val;
    434. }
         ^
    435. 
    436. unsigned int get_le24(ByteIOContext *s)

libavformat/aviobuf.c:449:5: 
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/aviobuf.c:450:1: return from a call to get_le32
  448.     val |= get_le16(s) << 16;
  449.     return val;
  450. }
       ^
  451. 
  452. uint64_t get_le64(ByteIOContext *s)

libavformat/nsvdec.c:309:9: 
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));
309.     if (url_feof(pb))
             ^
310.         return -1;
311. 

libavformat/aviobuf.c:209:1: start of procedure url_feof()
  207. }
  208. 
  209. int url_feof(ByteIOContext *s)
       ^
  210. {
  211.     if(!s)

libavformat/aviobuf.c:211:9: Taking false branch
  209. int url_feof(ByteIOContext *s)
  210. {
  211.     if(!s)
               ^
  212.         return 0;
  213.     return s->eof_reached;

libavformat/aviobuf.c:213:5: 
  211.     if(!s)
  212.         return 0;
  213.     return s->eof_reached;
           ^
  214. }
  215. 

libavformat/aviobuf.c:214:1: return from a call to url_feof
  212.         return 0;
  213.     return s->eof_reached;
  214. }
       ^
  215. 
  216. int url_ferror(ByteIOContext *s)

libavformat/nsvdec.c:309:9: Taking false branch
307.     PRINT(("NSV NSVf info-strings size: %d, table entries: %d, bis %d\n",
308.             strings_size, table_entries, table_entries_used));
309.     if (url_feof(pb))
             ^
310.         return -1;
311. 

libavformat/nsvdec.c:314:9: Taking true branch
312.     PRINT(("NSV got header; filepos %"PRId64"\n", url_ftell(pb)));
313. 
314.     if (strings_size > 0) {
             ^
315.         char *strings; /* last byte will be '\0' to play safe with str*() */
316.         char *p, *endp;

libavformat/nsvdec.c:320:9: 
318.         char quote;
319. 
320.         p = strings = av_mallocz(strings_size + 1);
             ^
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);

libavutil/mem.c:132:1: start of procedure av_mallocz()
  130. }
  131. 
  132. void *av_mallocz(unsigned int size)
       ^
  133. {
  134.     void *ptr = av_malloc(size);

libavutil/mem.c:134:5: 
  132. void *av_mallocz(unsigned int size)
  133. {
  134.     void *ptr = av_malloc(size);
           ^
  135.     if (ptr)
  136.         memset(ptr, 0, size);

libavutil/mem.c:42:1: start of procedure av_malloc()
    40.    linker will do it automatically */
    41. 
    42. void *av_malloc(unsigned int size)
        ^
    43. {
    44.     void *ptr;

libavutil/mem.c:50:8: Taking true branch
    48. 
    49.     /* let's disallow possible ambiguous cases */
    50.     if(size > (INT_MAX-16) )
               ^
    51.         return NULL;
    52. 

libavutil/mem.c:51:9: 
    49.     /* let's disallow possible ambiguous cases */
    50.     if(size > (INT_MAX-16) )
    51.         return NULL;
                ^
    52. 
    53. #ifdef CONFIG_MEMALIGN_HACK

libavutil/mem.c:92:1: return from a call to av_malloc
    90. #endif
    91.     return ptr;
    92. }
        ^
    93. 
    94. void *av_realloc(void *ptr, unsigned int size)

libavutil/mem.c:135:9: Taking false branch
  133. {
  134.     void *ptr = av_malloc(size);
  135.     if (ptr)
               ^
  136.         memset(ptr, 0, size);
  137.     return ptr;

libavutil/mem.c:137:5: 
  135.     if (ptr)
  136.         memset(ptr, 0, size);
  137.     return ptr;
           ^
  138. }
  139. 

libavutil/mem.c:138:1: return from a call to av_mallocz
  136.         memset(ptr, 0, size);
  137.     return ptr;
  138. }
       ^
  139. 
  140. char *av_strdup(const char *s)

libavformat/nsvdec.c:321:9: 
319. 
320.         p = strings = av_mallocz(strings_size + 1);
321.         endp = strings + strings_size;
             ^
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {

libavformat/nsvdec.c:322:9: Skipping get_buffer(): empty list of specs
320.         p = strings = av_mallocz(strings_size + 1);
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);
             ^
323.         while (p < endp) {
324.             while (*p == ' ')

libavformat/nsvdec.c:323:16: Loop condition is true. Entering loop body
321.         endp = strings + strings_size;
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {
                    ^
324.             while (*p == ' ')
325.                 p++; /* strip out spaces */

libavformat/nsvdec.c:324:20: 
322.         get_buffer(pb, strings, strings_size);
323.         while (p < endp) {
324.             while (*p == ' ')
                        ^
325.                 p++; /* strip out spaces */
326.             if (p >= endp-2)
