libavcodec/atrac3plus.c:508: error: Integer Overflow L2
  ([1, +oo] - 4):unsigned32 by call to `bitstream_read`.

libavcodec/atrac3plus.c:508:33: Call
506.                 num_long_vals = bitstream_read(bc, 5);
507.                 delta_bits    = bitstream_read(bc, 2);
508.                 min_val       = bitstream_read(bc, 4) - 7;
                                     ^
509. 
510.                 for (i = 0; i < num_long_vals; i++)

libavcodec/bitstream.h:183:1: Parameter `n`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavcodec/bitstream.h:194:12: Call
  192.     }
  193. 
  194.     return get_val(bc, n);
                  ^
  195. }
  196. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([1, +oo] - 4):unsigned32 by call to `bitstream_read` 
    137.     bc->bits <<= n;
    138. #endif
    139.     bc->bits_left -= n;
             ^
    140. 
    141.     return ret;

static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
{
#ifdef BITSTREAM_READER_LE
    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);
    bc->bits >>= n;
#else
    uint64_t ret = bc->bits >> (64 - n);
    bc->bits <<= n;
#endif
    bc->bits_left -= n;
    return ret;
}
['static int decode_channel_sf_idx(BitstreamContext *bc, Atrac3pChanUnitCtx *ctx,\n                                 int ch_num, AVCodecContext *avctx)\n{\n    int i, weight_idx = 0, delta, diff, num_long_vals,\n        delta_bits, min_val, vlc_sel, start_val;\n    VLC *vlc_tab;\n    Atrac3pChanParams *chan     = &ctx->channels[ch_num];\n    Atrac3pChanParams *ref_chan = &ctx->channels[0];\n    switch (bitstream_read(bc, 2)) {\n    case 0:\n        for (i = 0; i < ctx->used_quant_units; i++)\n            chan->qu_sf_idx[i] = bitstream_read(bc, 6);\n        break;\n    case 1:\n        if (ch_num) {\n            vlc_tab = &sf_vlc_tabs[bitstream_read(bc, 2)];\n            for (i = 0; i < ctx->used_quant_units; i++) {\n                delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n                chan->qu_sf_idx[i] = (ref_chan->qu_sf_idx[i] + delta) & 0x3F;\n            }\n        } else {\n            weight_idx = bitstream_read(bc, 2);\n            if (weight_idx == 3) {\n                UNPACK_SF_VQ_SHAPE(bc, chan->qu_sf_idx, ctx->used_quant_units);\n                num_long_vals = bitstream_read(bc, 5);\n                delta_bits    = bitstream_read(bc, 2);\n                min_val       = bitstream_read(bc, 4) - 7;\n                for (i = 0; i < num_long_vals; i++)\n                    chan->qu_sf_idx[i] = (chan->qu_sf_idx[i] +\n                                          bitstream_read(bc, 4) - 7) & 0x3F;\n                for (i = num_long_vals; i < ctx->used_quant_units; i++)\n                    chan->qu_sf_idx[i] = (chan->qu_sf_idx[i] + min_val +\n                                          bitstream_read(bc, delta_bits)) & 0x3F;\n            } else {\n                num_long_vals = bitstream_read(bc, 5);\n                delta_bits    = bitstream_read(bc, 3);\n                min_val       = bitstream_read(bc, 6);\n                if (num_long_vals > ctx->used_quant_units || delta_bits == 7) {\n                    av_log(avctx, AV_LOG_ERROR,\n                           "SF mode 1: invalid parameters!\\n");\n                    return AVERROR_INVALIDDATA;\n                }\n                for (i = 0; i < num_long_vals; i++)\n                    chan->qu_sf_idx[i] = bitstream_read(bc, 6);\n                for (i = num_long_vals; i < ctx->used_quant_units; i++)\n                    chan->qu_sf_idx[i] = (min_val +\n                                          bitstream_read(bc, delta_bits)) & 0x3F;\n            }\n        }\n        break;\n    case 2:\n        if (ch_num) {\n            vlc_tab = &sf_vlc_tabs[bitstream_read(bc, 2)];\n            delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n            chan->qu_sf_idx[0] = (ref_chan->qu_sf_idx[0] + delta) & 0x3F;\n            for (i = 1; i < ctx->used_quant_units; i++) {\n                diff  = ref_chan->qu_sf_idx[i] - ref_chan->qu_sf_idx[i - 1];\n                delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n                chan->qu_sf_idx[i] = (chan->qu_sf_idx[i - 1] + diff + delta) & 0x3F;\n            }\n        } else {\n            vlc_tab = &sf_vlc_tabs[bitstream_read(bc, 2) + 4];\n            UNPACK_SF_VQ_SHAPE(bc, chan->qu_sf_idx, ctx->used_quant_units);\n            for (i = 0; i < ctx->used_quant_units; i++) {\n                delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n                chan->qu_sf_idx[i] = (chan->qu_sf_idx[i] +\n                                      sign_extend(delta, 4)) & 0x3F;\n            }\n        }\n        break;\n    case 3:\n        if (ch_num) {\n            for (i = 0; i < ctx->used_quant_units; i++)\n                chan->qu_sf_idx[i] = ref_chan->qu_sf_idx[i];\n        } else {\n            weight_idx = bitstream_read(bc, 2);\n            vlc_sel    = bitstream_read(bc, 2);\n            vlc_tab    = &sf_vlc_tabs[vlc_sel];\n            if (weight_idx == 3) {\n                vlc_tab = &sf_vlc_tabs[vlc_sel + 4];\n                UNPACK_SF_VQ_SHAPE(bc, chan->qu_sf_idx, ctx->used_quant_units);\n                diff               = (bitstream_read(bc, 4) + 56)   & 0x3F;\n                chan->qu_sf_idx[0] = (chan->qu_sf_idx[0]    + diff) & 0x3F;\n                for (i = 1; i < ctx->used_quant_units; i++) {\n                    delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n                    diff               = (diff + sign_extend(delta, 4)) & 0x3F;\n                    chan->qu_sf_idx[i] = (diff + chan->qu_sf_idx[i])    & 0x3F;\n                }\n            } else {\n                chan->qu_sf_idx[0] = bitstream_read(bc, 6);\n                for (i = 1; i < ctx->used_quant_units; i++) {\n                    delta = bitstream_read_vlc(bc, vlc_tab->table, vlc_tab->bits, 1);\n                    chan->qu_sf_idx[i] = (chan->qu_sf_idx[i - 1] + delta) & 0x3F;\n                }\n            }\n        }\n        break;\n    }\n    if (weight_idx && weight_idx < 3)\n        return subtract_sf_weights(ctx, chan, weight_idx, avctx);\n    return 0;\n}', 'static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)\n{\n    if (!n)\n        return 0;\n    if (n > bc->bits_left) {\n        refill_32(bc);\n        if (bc->bits_left < 32)\n            bc->bits_left = n;\n    }\n    return get_val(bc, n);\n}', 'static inline uint64_t get_val(BitstreamContext *bc, unsigned n)\n{\n#ifdef BITSTREAM_READER_LE\n    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);\n    bc->bits >>= n;\n#else\n    uint64_t ret = bc->bits >> (64 - n);\n    bc->bits <<= n;\n#endif\n    bc->bits_left -= n;\n    return ret;\n}']