snmp_ber_decode_null(unsigned char *buf, uint32_t *buff_len)
{
  buf++;
  (*buff_len)--;

  buf++;
  (*buff_len)--;

  return buf;
}
The software reads data past the end, or before the beginning, of the intended buffer.