libavcodec/truespeech.c:87: error: Integer Overflow L2
  ([1, +oo] - 3):unsigned32 by call to `bitstream_read`.

libavcodec/truespeech.c:87:37: Call
85.     bitstream_init(&bc, dec->buffer, 32 * 8);
86. 
87.     dec->vector[7] = ts_codebook[7][bitstream_read(&bc, 3)];
                                        ^
88.     dec->vector[6] = ts_codebook[6][bitstream_read(&bc, 3)];
89.     dec->vector[5] = ts_codebook[5][bitstream_read(&bc, 3)];

libavcodec/bitstream.h:183:1: Parameter `n`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavcodec/bitstream.h:194:12: Call
  192.     }
  193. 
  194.     return get_val(bc, n);
                  ^
  195. }
  196. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([1, +oo] - 3):unsigned32 by call to `bitstream_read` 
    137.     bc->bits <<= n;
    138. #endif
    139.     bc->bits_left -= n;
             ^
    140. 
    141.     return ret;

static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
{
#ifdef BITSTREAM_READER_LE
    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);
    bc->bits >>= n;
#else
    uint64_t ret = bc->bits >> (64 - n);
    bc->bits <<= n;
#endif
    bc->bits_left -= n;
    return ret;
}
['static void truespeech_read_frame(TSContext *dec, const uint8_t *input)\n{\n    BitstreamContext bc;\n    dec->bdsp.bswap_buf((uint32_t *) dec->buffer, (const uint32_t *) input, 8);\n    bitstream_init(&bc, dec->buffer, 32 * 8);\n    dec->vector[7] = ts_codebook[7][bitstream_read(&bc, 3)];\n    dec->vector[6] = ts_codebook[6][bitstream_read(&bc, 3)];\n    dec->vector[5] = ts_codebook[5][bitstream_read(&bc, 3)];\n    dec->vector[4] = ts_codebook[4][bitstream_read(&bc, 4)];\n    dec->vector[3] = ts_codebook[3][bitstream_read(&bc, 4)];\n    dec->vector[2] = ts_codebook[2][bitstream_read(&bc, 4)];\n    dec->vector[1] = ts_codebook[1][bitstream_read(&bc, 5)];\n    dec->vector[0] = ts_codebook[0][bitstream_read(&bc, 5)];\n    dec->flag      = bitstream_read_bit(&bc);\n    dec->offset1[0] = bitstream_read(&bc, 4) << 4;\n    dec->offset2[3] = bitstream_read(&bc, 7);\n    dec->offset2[2] = bitstream_read(&bc, 7);\n    dec->offset2[1] = bitstream_read(&bc, 7);\n    dec->offset2[0] = bitstream_read(&bc, 7);\n    dec->offset1[1]  = bitstream_read(&bc, 4);\n    dec->pulseval[1] = bitstream_read(&bc, 14);\n    dec->pulseval[0] = bitstream_read(&bc, 14);\n    dec->offset1[1] |= bitstream_read(&bc, 4) << 4;\n    dec->pulseval[3] = bitstream_read(&bc, 14);\n    dec->pulseval[2] = bitstream_read(&bc, 14);\n    dec->offset1[0] |= bitstream_read_bit(&bc);\n    dec->pulsepos[0] = bitstream_read(&bc, 27);\n    dec->pulseoff[0] = bitstream_read(&bc, 4);\n    dec->offset1[0] |= bitstream_read_bit(&bc) << 1;\n    dec->pulsepos[1] = bitstream_read(&bc, 27);\n    dec->pulseoff[1] = bitstream_read(&bc, 4);\n    dec->offset1[0] |= bitstream_read_bit(&bc) << 2;\n    dec->pulsepos[2] = bitstream_read(&bc, 27);\n    dec->pulseoff[2] = bitstream_read(&bc, 4);\n    dec->offset1[0] |= bitstream_read_bit(&bc) << 3;\n    dec->pulsepos[3] = bitstream_read(&bc, 27);\n    dec->pulseoff[3] = bitstream_read(&bc, 4);\n}', 'static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)\n{\n    if (!n)\n        return 0;\n    if (n > bc->bits_left) {\n        refill_32(bc);\n        if (bc->bits_left < 32)\n            bc->bits_left = n;\n    }\n    return get_val(bc, n);\n}', 'static inline uint64_t get_val(BitstreamContext *bc, unsigned n)\n{\n#ifdef BITSTREAM_READER_LE\n    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);\n    bc->bits >>= n;\n#else\n    uint64_t ret = bc->bits >> (64 - n);\n    bc->bits <<= n;\n#endif\n    bc->bits_left -= n;\n    return ret;\n}']