libavcodec/cngdec.c:127: error: Integer Overflow L2
  ([0, 65535] - 32768):unsigned32.

libavcodec/cngdec.c:125:15: <LHS trace>
123.         e *= 1.0 - p->refl_coef[i]*p->refl_coef[i];
124. 
125.     scaling = sqrt(e * p->energy / 1081109975);
                   ^
126.     for (i = 0; i < avctx->frame_size; i++) {
127.         int r = (av_lfg_get(&p->lfg) & 0xffff) - 0x8000;

libavcodec/cngdec.c:125:15: Unknown value from: sqrt
123.         e *= 1.0 - p->refl_coef[i]*p->refl_coef[i];
124. 
125.     scaling = sqrt(e * p->energy / 1081109975);
                   ^
126.     for (i = 0; i < avctx->frame_size; i++) {
127.         int r = (av_lfg_get(&p->lfg) & 0xffff) - 0x8000;

libavcodec/cngdec.c:127:18: Call
125.     scaling = sqrt(e * p->energy / 1081109975);
126.     for (i = 0; i < avctx->frame_size; i++) {
127.         int r = (av_lfg_get(&p->lfg) & 0xffff) - 0x8000;
                      ^
128.         p->excitation[i] = scaling * r;
129.     }

libavutil/lfg.h:38:1: Parameter `c->state[*]`
  36.  * it may be good enough and faster for your specific use case.
  37.  */
  38. static inline unsigned int av_lfg_get(AVLFG *c){
      ^
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];

libavutil/lfg.h:40:5: Assignment
  38. static inline unsigned int av_lfg_get(AVLFG *c){
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];
          ^
  41. }
  42. 

libavcodec/cngdec.c:127:9: Binary operation: ([0, 65535] - 32768):unsigned32
125.     scaling = sqrt(e * p->energy / 1081109975);
126.     for (i = 0; i < avctx->frame_size; i++) {
127.         int r = (av_lfg_get(&p->lfg) & 0xffff) - 0x8000;
             ^
128.         p->excitation[i] = scaling * r;
129.     }
