libavcodec/8bps.c:106: error: Integer Overflow L2
  ([1, +oo] - [`*buf` + 2, 2+min(127, `*buf`)]):unsigned32.

libavcodec/8bps.c:60:1: <LHS trace>
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:60:1: Parameter `*buf`
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:100:32: Assignment
 98.                         pixptr = c->pic.data[0] + row * c->pic.linesize[0] + planemap[p];
 99.                         pixptr_end = pixptr + c->pic.linesize[0];
100.                         dlen = be2me_16(*(const unsigned short *)(lp+row*2));
                                    ^
101.                         /* Decode a row of this plane */
102.                         while(dlen > 0) {

libavcodec/8bps.c:100:25: Assignment
 98.                         pixptr = c->pic.data[0] + row * c->pic.linesize[0] + planemap[p];
 99.                         pixptr_end = pixptr + c->pic.linesize[0];
100.                         dlen = be2me_16(*(const unsigned short *)(lp+row*2));
                             ^
101.                         /* Decode a row of this plane */
102.                         while(dlen > 0) {

libavcodec/8bps.c:60:1: <RHS trace>
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:60:1: Parameter `*buf`
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:104:38: Assignment
102.                         while(dlen > 0) {
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
                                          ^
105.                                         count++;
106.                                         dlen -= count + 1;

libavcodec/8bps.c:105:41: Assignment
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
                                             ^
106.                                         dlen -= count + 1;
107.                                         if (pixptr + count * px_inc > pixptr_end)

libavcodec/8bps.c:106:41: Binary operation: ([1, +oo] - [*buf + 2, 2+min(127, *buf)]):unsigned32
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
106.                                         dlen -= count + 1;
                                             ^
107.                                         if (pixptr + count * px_inc > pixptr_end)
108.                                             break;
