libavcodec/vc1dec.c:3755: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_er_frame_end`.

libavcodec/vc1dec.c:3755:9: Call
3753. //  if(get_bits_count(&s->gb) > buf_size * 8)
3754. //      return -1;
3755.         ff_er_frame_end(s);
              ^
3756.     }
3757. 

libavcodec/error_resilience.c:776:1: Parameter `s->list_count`
  774. }
  775. 
  776. void ff_er_frame_end(MpegEncContext *s){
       ^
  777.     int i, mb_x, mb_y, error, error_type, dc_error, mv_error, ac_error;
  778.     int distance;

libavcodec/error_resilience.c:995:13: Call
  993.             s->mb_x= mb_x;
  994.             s->mb_y= mb_y;
  995.             decode_mb(s, 0/*FIXME h264 partitioned slices need this set*/);
                   ^
  996.         }
  997.     }

libavcodec/error_resilience.c:43:1: Parameter `s->list_count`
    41. #undef mb_intra
    42. 
    43. static void decode_mb(MpegEncContext *s, int ref){
        ^
    44.     s->dest[0] = s->current_picture.data[0] + (s->mb_y * 16* s->linesize  ) + s->mb_x * 16;
    45.     s->dest[1] = s->current_picture.data[1] + (s->mb_y * (16>>s->chroma_y_shift) * s->uvlinesize) + s->mb_x * (16>>s->chroma_x_shift);

libavcodec/error_resilience.c:59:9: Call
    57.         fill_rectangle(h->mv_cache[0][ scan8[0] ], 4, 4, 8, pack16to32(s->mv[0][0][0],s->mv[0][0][1]), 4);
    58.         assert(!FRAME_MBAFF);
    59.         ff_h264_hl_decode_mb(h);
                ^
    60.     }else{
    61.         assert(ref==0);

libavcodec/h264.c:2078:1: Parameter `h->list_count`
      2076. }
      2077. 
      2078. void ff_h264_hl_decode_mb(H264Context *h){
            ^
      2079.     MpegEncContext * const s = &h->s;
      2080.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2086:13: Call
      2084.     if (CHROMA444) {
      2085.         if(is_complex || h->pixel_shift)
      2086.             hl_decode_mb_444_complex(h);
                        ^
      2087.         else
      2088.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2070:1: Parameter `h->list_count`
        2068. }
        2069. 
        2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
              ^
        2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
        2072. }

libavcodec/h264.c:2071:5: Call
        2069. 
        2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
        2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
                  ^
        2072. }
        2073. 

libavcodec/h264.c:1950:1: Parameter `h->list_count`
          1948. }
          1949. 
          1950. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
                ^
          1951.     MpegEncContext * const s = &h->s;
          1952.     const int mb_x= s->mb_x;

libavcodec/h264.c:2030:17: Call
          2028.         }else{
          2029.             if (pixel_shift) {
          2030.                 hl_motion_16(h, dest[0], dest[1], dest[2],
                                ^
          2031.                              s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
          2032.                              s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:806:1: Parameter `h->list_count`
            804. }
            805. hl_motion_fn(0, 8);
            806. hl_motion_fn(1, 16);
                 ^
            807. 
            808. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:806:1: Call
            804. }
            805. hl_motion_fn(0, 8);
            806. hl_motion_fn(1, 16);
                 ^
            807. 
            808. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:689:1: Parameter `h->list_count`
              687. }
              688. 
              689. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
                   ^
              690.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
              691.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:701:9: Call
              699. 
              700.     if(HAVE_PTHREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
              701.         await_references(h);
                           ^
              702.     prefetch_motion(h, 0, pixel_shift, chroma444);
              703. 

libavcodec/h264.c:299:1: <LHS trace>
297.  * @param h the H264 context
298.  */
299. static void await_references(H264Context *h){
     ^
300.     MpegEncContext * const s = &h->s;
301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:299:1: Parameter `h->list_count`
                297.  * @param h the H264 context
                298.  */
                299. static void await_references(H264Context *h){
                     ^
                300.     MpegEncContext * const s = &h->s;
                301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:357:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_er_frame_end` 
                355.     }
                356. 
                357.     for(list=h->list_count-1; list>=0; list--){
                             ^
                358.         for(ref=0; ref<48 && nrefs[list]; ref++){
                359.             int row = refs[list][ref];
