libavformat/mxf.c:388: error: Integer Overflow L2
  ([-oo, 238609294] × 18):signed32.

libavformat/mxf.c:378:20: <LHS trace>
376. {
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
                        ^
379.     int item_len = get_be32(pb);
380. 

libavformat/mxf.c:378:20: Call
376. {
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
                        ^
379.     int item_len = get_be32(pb);
380. 

libavformat/aviobuf.c:477:11: Call
  475. {
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
                 ^
  478.     val |= get_be16(s);
  479.     return val;

libavformat/aviobuf.c:462:11: Call
    460. {
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
                   ^
    463.     val |= get_byte(s);
    464.     return val;

libavformat/aviobuf.c:348:13: Assignment
      346.             return *s->buf_ptr++;
      347.         else
      348.             return 0;
                       ^
      349.     }
      350. }

libavformat/aviobuf.c:462:5: Assignment
    460. {
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
             ^
    463.     val |= get_byte(s);
    464.     return val;

libavformat/aviobuf.c:463:5: Assignment
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
    463.     val |= get_byte(s);
             ^
    464.     return val;
    465. }

libavformat/aviobuf.c:464:5: Assignment
    462.     val = get_byte(s) << 8;
    463.     val |= get_byte(s);
    464.     return val;
             ^
    465. }
    466. 

libavformat/aviobuf.c:477:5: Assignment
  475. {
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
           ^
  478.     val |= get_be16(s);
  479.     return val;

libavformat/aviobuf.c:478:5: Assignment
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
  478.     val |= get_be16(s);
           ^
  479.     return val;
  480. }

libavformat/aviobuf.c:479:5: Assignment
  477.     val = get_be16(s) << 16;
  478.     val |= get_be16(s);
  479.     return val;
           ^
  480. }
  481. 

libavformat/mxf.c:378:5: Assignment
376. {
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
         ^
379.     int item_len = get_be32(pb);
380. 

libavformat/mxf.c:379:20: <RHS trace>
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
379.     int item_len = get_be32(pb);
                        ^
380. 
381.     if (item_len != 18) {

libavformat/mxf.c:379:20: Call
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
379.     int item_len = get_be32(pb);
                        ^
380. 
381.     if (item_len != 18) {

libavformat/aviobuf.c:477:11: Call
  475. {
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
                 ^
  478.     val |= get_be16(s);
  479.     return val;

libavformat/aviobuf.c:462:11: Call
    460. {
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
                   ^
    463.     val |= get_byte(s);
    464.     return val;

libavformat/aviobuf.c:348:13: Assignment
      346.             return *s->buf_ptr++;
      347.         else
      348.             return 0;
                       ^
      349.     }
      350. }

libavformat/aviobuf.c:462:5: Assignment
    460. {
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
             ^
    463.     val |= get_byte(s);
    464.     return val;

libavformat/aviobuf.c:463:5: Assignment
    461.     unsigned int val;
    462.     val = get_byte(s) << 8;
    463.     val |= get_byte(s);
             ^
    464.     return val;
    465. }

libavformat/aviobuf.c:464:5: Assignment
    462.     val = get_byte(s) << 8;
    463.     val |= get_byte(s);
    464.     return val;
             ^
    465. }
    466. 

libavformat/aviobuf.c:477:5: Assignment
  475. {
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
           ^
  478.     val |= get_be16(s);
  479.     return val;

libavformat/aviobuf.c:478:5: Assignment
  476.     unsigned int val;
  477.     val = get_be16(s) << 16;
  478.     val |= get_be16(s);
           ^
  479.     return val;
  480. }

libavformat/aviobuf.c:479:5: Assignment
  477.     val = get_be16(s) << 16;
  478.     val |= get_be16(s);
  479.     return val;
           ^
  480. }
  481. 

libavformat/mxf.c:379:5: Assignment
377.     ByteIOContext *pb = mxf->fc->pb;
378.     int item_num = get_be32(pb);
379.     int item_len = get_be32(pb);
         ^
380. 
381.     if (item_len != 18) {

libavformat/mxf.c:388:23: Binary operation: ([-oo, 238609294] × 18):signed32
386.         return -1;
387.     mxf->local_tags_count = item_num;
388.     mxf->local_tags = av_malloc(item_num*item_len);
                           ^
389.     if (!mxf->local_tags)
390.         return -1;
