subsdec: NULL dereference (fix #4125)