libavcodec/takdec.c:550: error: Integer Overflow L2
  ([-1, +oo] - 1):unsigned32 by call to `decode_subframe`.

libavcodec/takdec.c:526:25: Call
524.                                               s->sample_shift[chan]);
525.     s->lpc_mode[chan] = bitstream_read(bc, 2);
526.     nb_subframes      = bitstream_read(bc, 3) + 1;
                             ^
527. 
528.     i = 0;

libavcodec/bitstream.h:183:1: Parameter `bc->bits_left`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavcodec/takdec.c:550:20: Call
548.     prev = 0;
549.     for (i = 0; i < nb_subframes; i++) {
550.         if ((ret = decode_subframe(s, decoded, subframe_len[i], prev)) < 0)
                        ^
551.             return ret;
552.         decoded += subframe_len[i];

libavcodec/takdec.c:422:1: Parameter `s->bc.bits_left`
  420. }
  421. 
  422. static int decode_subframe(TAKDecContext *s, int32_t *decoded,
       ^
  423.                            int subframe_size, int prev_subframe_size)
  424. {

libavcodec/takdec.c:432:10: Call
  430.     memset(filter, 0, MAX_PREDICTORS * sizeof(*filter));
  431. 
  432.     if (!bitstream_read_bit(bc))
                ^
  433.         return decode_residues(s, decoded, subframe_size);
  434. 

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
    143. 
    144. /* Return one bit from the buffer. */
    145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    146. {
    147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
    148.         refill_64(bc);
    149. 
    150.     return get_val(bc, 1);
                    ^
    151. }
    152. 

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Assignment
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;

libavcodec/takdec.c:433:16: Call
  431. 
  432.     if (!bitstream_read_bit(bc))
  433.         return decode_residues(s, decoded, subframe_size);
                      ^
  434. 
  435.     filter_order = predictor_sizes[bitstream_read(bc, 4)];

libavcodec/takdec.c:286:1: Parameter `s->bc.bits_left`
    284. }
    285. 
    286. static int decode_residues(TAKDecContext *s, int32_t *decoded, int length)
         ^
    287. {
    288.     BitstreamContext *bc = &s->bc;

libavcodec/takdec.c:294:9: Call
    292.         return AVERROR_INVALIDDATA;
    293. 
    294.     if (bitstream_read_bit(bc)) {
                 ^
    295.         int wlength, rval;
    296.         int coding_mode[128];

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
      143. 
      144. /* Return one bit from the buffer. */
      145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
           ^
      146. {
      147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
      148.         refill_64(bc);
      149. 
      150.     return get_val(bc, 1);
                      ^
      151. }
      152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
        128. }
        129. 
        130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
             ^
        131. {
        132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
        128. }
        129. 
        130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
             ^
        131. {
        132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([-1, +oo] - 1):unsigned32 by call to `decode_subframe` 
        137.     bc->bits <<= n;
        138. #endif
        139.     bc->bits_left -= n;
                 ^
        140. 
        141.     return ret;
