libavformat/avidec.c:892: error: Integer Overflow L2
  ([0, 255] - 48):unsigned32.

libavformat/avidec.c:880:15: <LHS trace>
878.     /* Read the entries and sort them in each stream component. */
879.     for(i = 0; i < nb_index_entries; i++) {
880.         tag = get_le32(pb);
                   ^
881.         flags = get_le32(pb);
882.         pos = get_le32(pb);

libavformat/avidec.c:880:15: Call
878.     /* Read the entries and sort them in each stream component. */
879.     for(i = 0; i < nb_index_entries; i++) {
880.         tag = get_le32(pb);
                   ^
881.         flags = get_le32(pb);
882.         pos = get_le32(pb);

libavformat/aviobuf.c:447:11: Call
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
                 ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:431:11: Call
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
                   ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:349:13: Assignment
      347.             return *s->buf_ptr++;
      348.         else
      349.             return 0;
                       ^
      350.     }
      351. }

libavformat/aviobuf.c:431:5: Assignment
    429. {
    430.     unsigned int val;
    431.     val = get_byte(s);
             ^
    432.     val |= get_byte(s) << 8;
    433.     return val;

libavformat/aviobuf.c:432:5: Assignment
    430.     unsigned int val;
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
             ^
    433.     return val;
    434. }

libavformat/aviobuf.c:433:5: Assignment
    431.     val = get_byte(s);
    432.     val |= get_byte(s) << 8;
    433.     return val;
             ^
    434. }
    435. 

libavformat/aviobuf.c:447:5: Assignment
  445. {
  446.     unsigned int val;
  447.     val = get_le16(s);
           ^
  448.     val |= get_le16(s) << 16;
  449.     return val;

libavformat/aviobuf.c:448:5: Assignment
  446.     unsigned int val;
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
           ^
  449.     return val;
  450. }

libavformat/aviobuf.c:449:5: Assignment
  447.     val = get_le16(s);
  448.     val |= get_le16(s) << 16;
  449.     return val;
           ^
  450. }
  451. 

libavformat/avidec.c:880:9: Assignment
878.     /* Read the entries and sort them in each stream component. */
879.     for(i = 0; i < nb_index_entries; i++) {
880.         tag = get_le32(pb);
             ^
881.         flags = get_le32(pb);
882.         pos = get_le32(pb);

libavformat/avidec.c:892:9: Binary operation: ([0, 255] - 48):unsigned32
890.         pos += avi->movi_list;
891. 
892.         index = ((tag & 0xff) - '0') * 10;
             ^
893.         index += ((tag >> 8) & 0xff) - '0';
894.         if (index >= s->nb_streams)

static int avi_read_idx1(AVFormatContext *s, int size)
{
    AVIContext *avi = s->priv_data;
    ByteIOContext *pb = s->pb;
    int nb_index_entries, i;
    AVStream *st;
    AVIStream *ast;
    unsigned int index, tag, flags, pos, len;
    unsigned last_pos= -1;
    nb_index_entries = size / 16;
    if (nb_index_entries <= 0)
        return -1;
    for(i = 0; i < nb_index_entries; i++) {
        tag = get_le32(pb);
        flags = get_le32(pb);
        pos = get_le32(pb);
        len = get_le32(pb);
#if defined(DEBUG_SEEK)
        av_log(NULL, AV_LOG_DEBUG, "%d: tag=0x%x flags=0x%x pos=0x%x len=%d/",
               i, tag, flags, pos, len);
#endif
        if(i==0 && pos > avi->movi_list)
            avi->movi_list= 0;
        pos += avi->movi_list;
        index = ((tag & 0xff) - '0') * 10;
        index += ((tag >> 8) & 0xff) - '0';
        if (index >= s->nb_streams)
            continue;
        st = s->streams[index];
        ast = st->priv_data;
#if defined(DEBUG_SEEK)
        av_log(NULL, AV_LOG_DEBUG, "%d cum_len=%"PRId64"\n", len, ast->cum_len);
#endif
        if(last_pos == pos)
            avi->non_interleaved= 1;
        else
            av_add_index_entry(st, pos, ast->cum_len / FFMAX(1, ast->sample_size), len, 0, (flags&AVIIF_INDEX) ? AVINDEX_KEYFRAME : 0);
        if(ast->sample_size)
            ast->cum_len += len;
        else
            ast->cum_len ++;
        last_pos= pos;
    }
    return 0;
}
['static int avi_read_idx1(AVFormatContext *s, int size)\n{\n    AVIContext *avi = s->priv_data;\n    ByteIOContext *pb = s->pb;\n    int nb_index_entries, i;\n    AVStream *st;\n    AVIStream *ast;\n    unsigned int index, tag, flags, pos, len;\n    unsigned last_pos= -1;\n    nb_index_entries = size / 16;\n    if (nb_index_entries <= 0)\n        return -1;\n    for(i = 0; i < nb_index_entries; i++) {\n        tag = get_le32(pb);\n        flags = get_le32(pb);\n        pos = get_le32(pb);\n        len = get_le32(pb);\n#if defined(DEBUG_SEEK)\n        av_log(NULL, AV_LOG_DEBUG, "%d: tag=0x%x flags=0x%x pos=0x%x len=%d/",\n               i, tag, flags, pos, len);\n#endif\n        if(i==0 && pos > avi->movi_list)\n            avi->movi_list= 0;\n        pos += avi->movi_list;\n        index = ((tag & 0xff) - \'0\') * 10;\n        index += ((tag >> 8) & 0xff) - \'0\';\n        if (index >= s->nb_streams)\n            continue;\n        st = s->streams[index];\n        ast = st->priv_data;\n#if defined(DEBUG_SEEK)\n        av_log(NULL, AV_LOG_DEBUG, "%d cum_len=%"PRId64"\\n", len, ast->cum_len);\n#endif\n        if(last_pos == pos)\n            avi->non_interleaved= 1;\n        else\n            av_add_index_entry(st, pos, ast->cum_len / FFMAX(1, ast->sample_size), len, 0, (flags&AVIIF_INDEX) ? AVINDEX_KEYFRAME : 0);\n        if(ast->sample_size)\n            ast->cum_len += len;\n        else\n            ast->cum_len ++;\n        last_pos= pos;\n    }\n    return 0;\n}', 'unsigned int get_le32(ByteIOContext *s)\n{\n    unsigned int val;\n    val = get_le16(s);\n    val |= get_le16(s) << 16;\n    return val;\n}', 'unsigned int get_le16(ByteIOContext *s)\n{\n    unsigned int val;\n    val = get_byte(s);\n    val |= get_byte(s) << 8;\n    return val;\n}', 'int get_byte(ByteIOContext *s)\n{\n    if (s->buf_ptr < s->buf_end) {\n        return *s->buf_ptr++;\n    } else {\n        fill_buffer(s);\n        if (s->buf_ptr < s->buf_end)\n            return *s->buf_ptr++;\n        else\n            return 0;\n    }\n}']