libavformat/oggparsetheora.c:93: error: Integer Overflow L2
  ([0, +oo] - 16):unsigned32 by call to `bitstream_skip`.

libavformat/oggparsetheora.c:86:26: Call
84.         if (thp->version >= 0x030200) {
85.             int width  = bitstream_read(&bc, 24);
86.             int height = bitstream_read(&bc, 24);
                             ^
87.             if (width  <= st->codecpar->width  && width  > st->codecpar->width  - 16 &&
88.                 height <= st->codecpar->height && height > st->codecpar->height - 16) {

libavcodec/bitstream.h:183:1: Parameter `bc->bits_left`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavformat/oggparsetheora.c:93:13: Call
91.             }
92. 
93.             bitstream_skip(&bc, 16);
                ^
94.         }
95. 

libavcodec/bitstream.h:241:1: Parameter `n`
  239. 
  240. /* Skip n bits in the buffer. */
  241. static inline void bitstream_skip(BitstreamContext *bc, unsigned n)
       ^
  242. {
  243.     if (n <= bc->bits_left)

libavcodec/bitstream.h:244:9: Call
  242. {
  243.     if (n <= bc->bits_left)
  244.         skip_remaining(bc, n);
               ^
  245.     else {
  246.         n -= bc->bits_left;

libavcodec/bitstream.h:230:1: <LHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `bc->bits_left`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: <RHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `n`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Binary operation: ([0, +oo] - 16):unsigned32 by call to `bitstream_skip` 
    235.     bc->bits <<= n;
    236. #endif
    237.     bc->bits_left -= n;
             ^
    238. }
    239. 

static inline void skip_remaining(BitstreamContext *bc, unsigned n)
{
#ifdef BITSTREAM_READER_LE
    bc->bits >>= n;
#else
    bc->bits <<= n;
#endif
    bc->bits_left -= n;
}
['static int theora_header(AVFormatContext *s, int idx)\n{\n    struct ogg *ogg       = s->priv_data;\n    struct ogg_stream *os = ogg->streams + idx;\n    AVStream *st          = s->streams[idx];\n    TheoraParams *thp     = os->private;\n    int cds               = st->codecpar->extradata_size + os->psize + 2;\n    int err;\n    uint8_t *cdp;\n    if (!(os->buf[os->pstart] & 0x80))\n        return 0;\n    if (!thp) {\n        thp = av_mallocz(sizeof(*thp));\n        if (!thp)\n            return AVERROR(ENOMEM);\n        os->private = thp;\n    }\n    switch (os->buf[os->pstart]) {\n    case 0x80: {\n        BitstreamContext bc;\n        AVRational timebase;\n        bitstream_init(&bc, os->buf + os->pstart, os->psize * 8);\n        bitstream_skip(&bc, 7 * 8);\n        thp->version = bitstream_read(&bc, 24);\n        if (thp->version < 0x030100) {\n            av_log(s, AV_LOG_ERROR,\n                   "Too old or unsupported Theora (%x)\\n", thp->version);\n            return AVERROR(ENOSYS);\n        }\n        st->codecpar->width  = bitstream_read(&bc, 16) << 4;\n        st->codecpar->height = bitstream_read(&bc, 16) << 4;\n        if (thp->version >= 0x030400)\n            bitstream_skip(&bc, 100);\n        if (thp->version >= 0x030200) {\n            int width  = bitstream_read(&bc, 24);\n            int height = bitstream_read(&bc, 24);\n            if (width  <= st->codecpar->width  && width  > st->codecpar->width  - 16 &&\n                height <= st->codecpar->height && height > st->codecpar->height - 16) {\n                st->codecpar->width  = width;\n                st->codecpar->height = height;\n            }\n            bitstream_skip(&bc, 16);\n        }\n        timebase.den = bitstream_read(&bc, 32);\n        timebase.num = bitstream_read(&bc, 32);\n        if (!(timebase.num > 0 && timebase.den > 0)) {\n            av_log(s, AV_LOG_WARNING, "Invalid time base in theora stream, assuming 25 FPS\\n");\n            timebase.num = 1;\n            timebase.den = 25;\n        }\n        avpriv_set_pts_info(st, 64, timebase.num, timebase.den);\n        st->sample_aspect_ratio.num = bitstream_read(&bc, 24);\n        st->sample_aspect_ratio.den = bitstream_read(&bc, 24);\n        if (thp->version >= 0x030200)\n            bitstream_skip(&bc, 38);\n        if (thp->version >= 0x304000)\n            bitstream_skip(&bc, 2);\n        thp->gpshift = bitstream_read(&bc, 5);\n        thp->gpmask  = (1 << thp->gpshift) - 1;\n        st->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;\n        st->codecpar->codec_id   = AV_CODEC_ID_THEORA;\n        st->need_parsing      = AVSTREAM_PARSE_HEADERS;\n    }\n    break;\n    case 0x81:\n        ff_vorbis_stream_comment(s, st, os->buf + os->pstart + 7, os->psize - 7);\n    case 0x82:\n        if (!thp->version)\n            return AVERROR_INVALIDDATA;\n        break;\n    default:\n        return AVERROR_INVALIDDATA;\n    }\n    if ((err = av_reallocp(&st->codecpar->extradata,\n                           cds + AV_INPUT_BUFFER_PADDING_SIZE)) < 0) {\n        st->codecpar->extradata_size = 0;\n        return err;\n    }\n    cdp    = st->codecpar->extradata + st->codecpar->extradata_size;\n    *cdp++ = os->psize >> 8;\n    *cdp++ = os->psize & 0xff;\n    memcpy(cdp, os->buf + os->pstart, os->psize);\n    st->codecpar->extradata_size = cds;\n    return 1;\n}', 'static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)\n{\n    if (!n)\n        return 0;\n    if (n > bc->bits_left) {\n        refill_32(bc);\n        if (bc->bits_left < 32)\n            bc->bits_left = n;\n    }\n    return get_val(bc, n);\n}', 'static inline void bitstream_skip(BitstreamContext *bc, unsigned n)\n{\n    if (n <= bc->bits_left)\n        skip_remaining(bc, n);\n    else {\n        n -= bc->bits_left;\n        skip_remaining(bc, bc->bits_left);\n        if (n >= 64) {\n            unsigned skip = n / 8;\n            n -= skip * 8;\n            bc->ptr += skip;\n        }\n        refill_64(bc);\n        if (n)\n            skip_remaining(bc, n);\n    }\n}', 'static inline void skip_remaining(BitstreamContext *bc, unsigned n)\n{\n#ifdef BITSTREAM_READER_LE\n    bc->bits >>= n;\n#else\n    bc->bits <<= n;\n#endif\n    bc->bits_left -= n;\n}']