Dear all, the attached patch fixes two issues: first it addresses a NULL pointer dereference on invalid input, triggered by the provided testcase. Second, while analyzing the context of the affected code, I looked into the testcase for PR96102, and by varying it slightly, i.e. replacing functions by subroutines I found that we accept invalid code that is rejected by several other brands tested. To fix this, I removed one line of a condition that did not seem to make sense to me. Regtested on x86_64-pc-linux-gnu. OK for mainline? Thanks, Harald