libavformat/ape.c:190: error: Integer Overflow L2
  ([32, +oo] - [-oo, 16777312]):unsigned32.

libavformat/ape.c:147:21: <LHS trace>
145. {
146.     ByteIOContext *pb = s->pb;
147.     int file_size = url_fsize(pb);
                         ^
148.     uint32_t val, fields, tag_bytes;
149.     uint8_t buf[8];

libavformat/ape.c:147:21: Call
145. {
146.     ByteIOContext *pb = s->pb;
147.     int file_size = url_fsize(pb);
                         ^
148.     uint32_t val, fields, tag_bytes;
149.     uint8_t buf[8];

libavformat/aviobuf.c:194:9: Assignment
  192. 
  193.     if(!s)
  194.         return AVERROR(EINVAL);
               ^
  195. 
  196.     if (!s->seek)

libavformat/ape.c:147:5: Assignment
145. {
146.     ByteIOContext *pb = s->pb;
147.     int file_size = url_fsize(pb);
         ^
148.     uint32_t val, fields, tag_bytes;
149.     uint8_t buf[8];

libavformat/ape.c:169:17: <RHS trace>
167.     }
168. 
169.     tag_bytes = get_le32(pb);  /* tag size */
                     ^
170.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
171.         av_log(NULL, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/ape.c:169:17: Call
167.     }
168. 
169.     tag_bytes = get_le32(pb);  /* tag size */
                     ^
170.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
171.         av_log(NULL, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/aviobuf.c:446:11: Call
  444. {
  445.     unsigned int val;
  446.     val = get_le16(s);
                 ^
  447.     val |= get_le16(s) << 16;
  448.     return val;

libavformat/aviobuf.c:430:11: Call
    428. {
    429.     unsigned int val;
    430.     val = get_byte(s);
                   ^
    431.     val |= get_byte(s) << 8;
    432.     return val;

libavformat/aviobuf.c:348:13: Assignment
      346.             return *s->buf_ptr++;
      347.         else
      348.             return 0;
                       ^
      349.     }
      350. }

libavformat/aviobuf.c:430:5: Assignment
    428. {
    429.     unsigned int val;
    430.     val = get_byte(s);
             ^
    431.     val |= get_byte(s) << 8;
    432.     return val;

libavformat/aviobuf.c:431:5: Assignment
    429.     unsigned int val;
    430.     val = get_byte(s);
    431.     val |= get_byte(s) << 8;
             ^
    432.     return val;
    433. }

libavformat/aviobuf.c:432:5: Assignment
    430.     val = get_byte(s);
    431.     val |= get_byte(s) << 8;
    432.     return val;
             ^
    433. }
    434. 

libavformat/aviobuf.c:446:5: Assignment
  444. {
  445.     unsigned int val;
  446.     val = get_le16(s);
           ^
  447.     val |= get_le16(s) << 16;
  448.     return val;

libavformat/aviobuf.c:447:5: Assignment
  445.     unsigned int val;
  446.     val = get_le16(s);
  447.     val |= get_le16(s) << 16;
           ^
  448.     return val;
  449. }

libavformat/aviobuf.c:448:5: Assignment
  446.     val = get_le16(s);
  447.     val |= get_le16(s) << 16;
  448.     return val;
           ^
  449. }
  450. 

libavformat/ape.c:169:5: Assignment
167.     }
168. 
169.     tag_bytes = get_le32(pb);  /* tag size */
         ^
170.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
171.         av_log(NULL, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/ape.c:190:5: Binary operation: ([32, +oo] - [-oo, 16777312]):unsigned32
188.         tag_bytes += 2*APE_TAG_FOOTER_BYTES;
189. 
190.     url_fseek(pb, file_size - tag_bytes, SEEK_SET);
         ^
191. 
192.     for (i=0; i<fields; i++)
