find a typo mistake, which may cause a null pointer deference: https://github.com/antirez/redis/blob/c33cb4938a6debf999a9af312498a4ab91271c81/src/redis-cli.c#L2844

            redisReply *reply = CLUSTER_MANAGER_COMMAND(node, "DBSIZE");
L2844:      if (reply != NULL || reply->type == REDIS_REPLY_INTEGER)  //<------ || should be &&
                dbsize = reply->integer;
            if (dbsize < 0) {

another possible null pointer deference: https://github.com/antirez/redis/blob/c33cb4938a6debf999a9af312498a4ab91271c81/src/quicklist.c#L1585

        for (unsigned int at = 0; at < ql->len; at++, node = node->next) {
            if (node && (at < low_raw || at >= high_raw)) {
                if (node->encoding != QUICKLIST_NODE_ENCODING_RAW) {
                    yell("Incorrect compression: node %d is "
                         "compressed at depth %d ((%u, %u); total "
                         "nodes: %u; size: %u; recompress: %d)",
                         at, ql->compress, low_raw, high_raw, ql->len, node->sz,
                         node->recompress);
                    errors++;
                }
L1585:      } else { //<-------------node might be NULL in this else branch !!
                if (node->encoding != QUICKLIST_NODE_ENCODING_LZF &&
                    !node->attempted_compress) {