libavcodec/ac3dec.c:465: error: Integer Overflow L2
  ([0, 8388607] - 4194304):unsigned32.

libavcodec/ac3dec.c:448:1: <LHS trace>
446.  * reference: Section 7.3 Quantization and Decoding of Mantissas
447.  */
448. static void ac3_decode_transform_coeffs_ch(AC3DecodeContext *s, int ch_index, mant_groups *m)
     ^
449. {
450.     int start_freq = s->start_freq[ch_index];

libavcodec/ac3dec.c:448:1: Parameter `s->dith_state.state[*]`
446.  * reference: Section 7.3 Quantization and Decoding of Mantissas
447.  */
448. static void ac3_decode_transform_coeffs_ch(AC3DecodeContext *s, int ch_index, mant_groups *m)
     ^
449. {
450.     int start_freq = s->start_freq[ch_index];

libavcodec/ac3dec.c:465:33: Call
463.             case 0:
464.                 if (dither)
465.                     mantissa = (av_lfg_get(&s->dith_state) & 0x7FFFFF) - 0x400000;
                                     ^
466.                 else
467.                     mantissa = 0;

libavutil/lfg.h:38:1: Parameter `c->state[*]`
  36.  * it may be good enough and faster for your specific use case.
  37.  */
  38. static inline unsigned int av_lfg_get(AVLFG *c){
      ^
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];

libavutil/lfg.h:40:5: Assignment
  38. static inline unsigned int av_lfg_get(AVLFG *c){
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];
          ^
  41. }
  42. 

libavcodec/ac3dec.c:465:21: Binary operation: ([0, 8388607] - 4194304):unsigned32
463.             case 0:
464.                 if (dither)
465.                     mantissa = (av_lfg_get(&s->dith_state) & 0x7FFFFF) - 0x400000;
                         ^
466.                 else
467.                     mantissa = 0;
