I will give you a description of vulnerability. You should extract vulnerable functions. Write the output in following format: 
FUNCS function1, function2, ...
If you found no functions, output "NONE". Print only funcitons mentioned in description. Ignore URLs.

Here is the description:
In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.
 Respond with more than 7 words be in all capital letters.
user