libavcodec/qtrle.c:262: error: Integer Overflow L2
  ([0, `*s->g.buffer`] - 1):unsigned32.

libavcodec/qtrle.c:252:1: <LHS trace>
250. }
251. 
252. static void qtrle_decode_24bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
253. {
254.     int rle_code;

libavcodec/qtrle.c:252:1: Parameter `*s->g.buffer`
250. }
251. 
252. static void qtrle_decode_24bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
253. {
254.     int rle_code;

libavcodec/qtrle.c:262:32: Call
260. 
261.     while (lines_to_change--) {
262.         pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 3;
                                    ^
263. 
264.         while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {

libavcodec/bytestream.h:92:1: Assignment
  90. DEF(unsigned int, be24, 3, AV_RB24, AV_WB24)
  91. DEF(unsigned int, be16, 2, AV_RB16, AV_WB16)
  92. DEF(unsigned int, byte, 1, AV_RB8 , AV_WB8)
      ^
  93. 
  94. #if HAVE_BIGENDIAN

libavcodec/qtrle.c:262:9: Binary operation: ([0, *s->g.buffer] - 1):unsigned32
260. 
261.     while (lines_to_change--) {
262.         pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 3;
             ^
263. 
264.         while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {

static void qtrle_decode_24bpp(QtrleContext *s, int row_ptr, int lines_to_change)
{
    int rle_code;
    int pixel_ptr;
    int row_inc = s->frame.linesize[0];
    unsigned char r, g, b;
    unsigned char *rgb = s->frame.data[0];
    int pixel_limit = s->frame.linesize[0] * s->avctx->height;
    while (lines_to_change--) {
        pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 3;
        while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {
            if (rle_code == 0) {
                pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 3;
                CHECK_PIXEL_PTR(0);
            } else if (rle_code < 0) {
                rle_code = -rle_code;
                r = bytestream2_get_byte(&s->g);
                g = bytestream2_get_byte(&s->g);
                b = bytestream2_get_byte(&s->g);
                CHECK_PIXEL_PTR(rle_code * 3);
                while (rle_code--) {
                    rgb[pixel_ptr++] = r;
                    rgb[pixel_ptr++] = g;
                    rgb[pixel_ptr++] = b;
                }
            } else {
                CHECK_PIXEL_PTR(rle_code * 3);
                while (rle_code--) {
                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);
                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);
                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);
                }
            }
        }
        row_ptr += row_inc;
    }
}
['static void qtrle_decode_24bpp(QtrleContext *s, int row_ptr, int lines_to_change)\n{\n    int rle_code;\n    int pixel_ptr;\n    int row_inc = s->frame.linesize[0];\n    unsigned char r, g, b;\n    unsigned char *rgb = s->frame.data[0];\n    int pixel_limit = s->frame.linesize[0] * s->avctx->height;\n    while (lines_to_change--) {\n        pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 3;\n        while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {\n            if (rle_code == 0) {\n                pixel_ptr += (bytestream2_get_byte(&s->g) - 1) * 3;\n                CHECK_PIXEL_PTR(0);\n            } else if (rle_code < 0) {\n                rle_code = -rle_code;\n                r = bytestream2_get_byte(&s->g);\n                g = bytestream2_get_byte(&s->g);\n                b = bytestream2_get_byte(&s->g);\n                CHECK_PIXEL_PTR(rle_code * 3);\n                while (rle_code--) {\n                    rgb[pixel_ptr++] = r;\n                    rgb[pixel_ptr++] = g;\n                    rgb[pixel_ptr++] = b;\n                }\n            } else {\n                CHECK_PIXEL_PTR(rle_code * 3);\n                while (rle_code--) {\n                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);\n                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);\n                    rgb[pixel_ptr++] = bytestream2_get_byte(&s->g);\n                }\n            }\n        }\n        row_ptr += row_inc;\n    }\n}', 'DEF(unsigned int, byte, 1, AV_RB8 , AV_WB8)']