libavcodec/dfa.c:340: error: Integer Overflow L2
  ([min(0, `avpkt->data->l`), max(0, `avpkt->data->l`)] - 2):unsigned32.

libavcodec/dfa.c:303:1: <LHS trace>
301. };
302. 
303. static int dfa_decode_frame(AVCodecContext *avctx,
     ^
304.                             void *data, int *data_size,
305.                             AVPacket *avpkt)

libavcodec/dfa.c:303:1: Parameter `avpkt->data->l`
301. };
302. 
303. static int dfa_decode_frame(AVCodecContext *avctx,
     ^
304.                             void *data, int *data_size,
305.                             AVPacket *avpkt)

libavcodec/dfa.c:327:22: Call
325.         bytestream2_skip(&gb, 4);
326.         chunk_size = bytestream2_get_le32(&gb);
327.         chunk_type = bytestream2_get_le32(&gb);
                          ^
328.         if (!chunk_type)
329.             break;

libavcodec/bytestream.h:85:1: Assignment
  83. 
  84. DEF(uint64_t,     le64, 8, AV_RL64, AV_WL64)
  85. DEF(unsigned int, le32, 4, AV_RL32, AV_WL32)
      ^
  86. DEF(unsigned int, le24, 3, AV_RL24, AV_WL24)
  87. DEF(unsigned int, le16, 2, AV_RL16, AV_WL16)

libavcodec/dfa.c:327:9: Assignment
325.         bytestream2_skip(&gb, 4);
326.         chunk_size = bytestream2_get_le32(&gb);
327.         chunk_type = bytestream2_get_le32(&gb);
             ^
328.         if (!chunk_type)
329.             break;

libavcodec/dfa.c:340:24: Binary operation: ([min(0, avpkt->data->l), max(0, avpkt->data->l)] - 2):unsigned32
338.             if (decoder[chunk_type - 2](&gb, s->frame_buf, avctx->width, avctx->height)) {
339.                 av_log(avctx, AV_LOG_ERROR, "Error decoding %s chunk\n",
340.                        chunk_name[chunk_type - 2]);
                            ^
341.                 return AVERROR_INVALIDDATA;
342.             }
