[MPlayer-dev-eng] crash when decode realmedia (MPplayer-1.0rc2)

[pker at 163.com]

In demux_real_fill_buffer() of libmpdemux/demux_real.c :
if (((sh_audio_t *)ds->sh)->format == mmioFOURCC('M', 'P', '4', 'A')) {

ds->sh is NULL

how to fix this problem?