libavcodec/qtrle.c:231: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32.

libavcodec/qtrle.c:215:1: <LHS trace>
213. }
214. 
215. static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
216. {
217.     int rle_code;

libavcodec/qtrle.c:215:1: Parameter `*s->g.buffer_end`
213. }
214. 
215. static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
216. {
217.     int rle_code;

libavcodec/qtrle.c:228:41: Call
226.         CHECK_PIXEL_PTR(0);
227. 
228.         while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {
                                             ^
229.             if (rle_code == 0) {
230.                 /* there's another skip code in the stream */

libavcodec/bytestream.h:94:1: Parameter `*g->buffer`
  92. DEF(unsigned int, be24, 3, AV_RB24, AV_WB24)
  93. DEF(unsigned int, be16, 2, AV_RB16, AV_WB16)
  94. DEF(unsigned int, byte, 1, AV_RB8 , AV_WB8)
      ^
  95. 
  96. #if HAVE_BIGENDIAN

libavcodec/qtrle.c:231:31: Call
229.             if (rle_code == 0) {
230.                 /* there's another skip code in the stream */
231.                 pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 2;
                                   ^
232.                 CHECK_PIXEL_PTR(0);  /* make sure pixel_ptr is positive */
233.             } else if (rle_code < 0) {

libavcodec/bytestream.h:94:1: Assignment
  92. DEF(unsigned int, be24, 3, AV_RB24, AV_WB24)
  93. DEF(unsigned int, be16, 2, AV_RB16, AV_WB16)
  94. DEF(unsigned int, byte, 1, AV_RB8 , AV_WB8)
      ^
  95. 
  96. #if HAVE_BIGENDIAN

libavcodec/qtrle.c:231:17: Binary operation: ([0, +oo] - 1):unsigned32
229.             if (rle_code == 0) {
230.                 /* there's another skip code in the stream */
231.                 pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 2;
                     ^
232.                 CHECK_PIXEL_PTR(0);  /* make sure pixel_ptr is positive */
233.             } else if (rle_code < 0) {

static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)
{
    int rle_code;
    int pixel_ptr;
    int row_inc = s->frame->linesize[0];
    unsigned short rgb16;
    unsigned char *rgb = s->frame->data[0];
    int pixel_limit = s->frame->linesize[0] * s->avctx->height;
    while (lines_to_change--) {
        pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 2;
        CHECK_PIXEL_PTR(0);
        while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {
            if (rle_code == 0) {
                pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 2;
                CHECK_PIXEL_PTR(0);
            } else if (rle_code < 0) {
                rle_code = -rle_code;
                rgb16 = bytestream2_get_be16(&s->g);
                CHECK_PIXEL_PTR(rle_code * 2);
                while (rle_code--) {
                    *(unsigned short *)(&rgb[pixel_ptr]) = rgb16;
                    pixel_ptr += 2;
                }
            } else {
                CHECK_PIXEL_PTR(rle_code * 2);
                while (rle_code--) {
                    rgb16 = bytestream2_get_be16(&s->g);
                    *(unsigned short *)(&rgb[pixel_ptr]) = rgb16;
                    pixel_ptr += 2;
                }
            }
        }
        row_ptr += row_inc;
    }
}
['static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)\n{\n    int rle_code;\n    int pixel_ptr;\n    int row_inc = s->frame->linesize[0];\n    unsigned short rgb16;\n    unsigned char *rgb = s->frame->data[0];\n    int pixel_limit = s->frame->linesize[0] * s->avctx->height;\n    while (lines_to_change--) {\n        pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 2;\n        CHECK_PIXEL_PTR(0);\n        while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {\n            if (rle_code == 0) {\n                pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 2;\n                CHECK_PIXEL_PTR(0);\n            } else if (rle_code < 0) {\n                rle_code = -rle_code;\n                rgb16 = bytestream2_get_be16(&s->g);\n                CHECK_PIXEL_PTR(rle_code * 2);\n                while (rle_code--) {\n                    *(unsigned short *)(&rgb[pixel_ptr]) = rgb16;\n                    pixel_ptr += 2;\n                }\n            } else {\n                CHECK_PIXEL_PTR(rle_code * 2);\n                while (rle_code--) {\n                    rgb16 = bytestream2_get_be16(&s->g);\n                    *(unsigned short *)(&rgb[pixel_ptr]) = rgb16;\n                    pixel_ptr += 2;\n                }\n            }\n        }\n        row_ptr += row_inc;\n    }\n}', 'DEF(unsigned int, byte, 1, AV_RB8 , AV_WB8)']