libavcodec/g2meet.c:1029: error: Integer Overflow L2
  ([1, +oo] - [1, 8]):unsigned32 by call to `bitstream_read`.

libavcodec/g2meet.c:1020:26: Assignment
1018.     bitstream_init8(&bc, src, len);
1019. 
1020.     if (npal <= 2)       nb = 1;
                               ^
1021.     else if (npal <= 4)  nb = 2;
1022.     else if (npal <= 16) nb = 4;

libavcodec/g2meet.c:1029:19: Call
1027.             continue;
1028.         for (i = 0; i < width; i++) {
1029.             col = bitstream_read(&bc, nb);
                        ^
1030.             if (col != tidx)
1031.                 memcpy(dst + i * 3, pal + col * 3, 3);

libavcodec/bitstream.h:183:1: Parameter `n`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavcodec/bitstream.h:194:12: Call
  192.     }
  193. 
  194.     return get_val(bc, n);
                  ^
  195. }
  196. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([1, +oo] - [1, 8]):unsigned32 by call to `bitstream_read` 
    137.     bc->bits <<= n;
    138. #endif
    139.     bc->bits_left -= n;
             ^
    140. 
    141.     return ret;

static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
{
#ifdef BITSTREAM_READER_LE
    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);
    bc->bits >>= n;
#else
    uint64_t ret = bc->bits >> (64 - n);
    bc->bits <<= n;
#endif
    bc->bits_left -= n;
    return ret;
}
['static void kempf_restore_buf(const uint8_t *src, int len,\n                              uint8_t *dst, int stride,\n                              const uint8_t *jpeg_tile, int tile_stride,\n                              int width, int height,\n                              const uint8_t *pal, int npal, int tidx)\n{\n    BitstreamContext bc;\n    int i, j, nb, col;\n    int align_width = FFALIGN(width, 16);\n    bitstream_init8(&bc, src, len);\n    if (npal <= 2)       nb = 1;\n    else if (npal <= 4)  nb = 2;\n    else if (npal <= 16) nb = 4;\n    else                 nb = 8;\n    for (j = 0; j < height; j++, dst += stride, jpeg_tile += tile_stride) {\n        if (bitstream_read(&bc, 8))\n            continue;\n        for (i = 0; i < width; i++) {\n            col = bitstream_read(&bc, nb);\n            if (col != tidx)\n                memcpy(dst + i * 3, pal + col * 3, 3);\n            else\n                memcpy(dst + i * 3, jpeg_tile + i * 3, 3);\n        }\n        bitstream_skip(&bc, nb * (align_width - width));\n    }\n}', 'static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)\n{\n    if (!n)\n        return 0;\n    if (n > bc->bits_left) {\n        refill_32(bc);\n        if (bc->bits_left < 32)\n            bc->bits_left = n;\n    }\n    return get_val(bc, n);\n}', 'static inline uint64_t get_val(BitstreamContext *bc, unsigned n)\n{\n#ifdef BITSTREAM_READER_LE\n    uint64_t ret = bc->bits & ((UINT64_C(1) << n) - 1);\n    bc->bits >>= n;\n#else\n    uint64_t ret = bc->bits >> (64 - n);\n    bc->bits <<= n;\n#endif\n    bc->bits_left -= n;\n    return ret;\n}']