find a typo mistake, which may cause a null pointer deference: https://github.com/antirez/redis/blob/c33cb4938a6debf999a9af312498a4ab91271c81/src/redis-cli.c#L2844
redisReply *reply = CLUSTER_MANAGER_COMMAND(node, "DBSIZE");
L2844: if (reply != NULL || reply->type == REDIS_REPLY_INTEGER) //<------ || should be &&
dbsize = reply->integer;
if (dbsize < 0) {
another possible null pointer deference: https://github.com/antirez/redis/blob/c33cb4938a6debf999a9af312498a4ab91271c81/src/quicklist.c#L1585
for (unsigned int at = 0; at < ql->len; at++, node = node->next) {
if (node && (at < low_raw || at >= high_raw)) {
if (node->encoding != QUICKLIST_NODE_ENCODING_RAW) {
yell("Incorrect compression: node %d is "
"compressed at depth %d ((%u, %u); total "
"nodes: %u; size: %u; recompress: %d)",
at, ql->compress, low_raw, high_raw, ql->len, node->sz,
node->recompress);
errors++;
}
L1585: } else { //<-------------node might be NULL in this else branch !!
if (node->encoding != QUICKLIST_NODE_ENCODING_LZF &&
!node->attempted_compress) {