libavcodec/png_parser.c:86: error: Integer Overflow L2
  ([-oo, 2147483647] + 4):signed32.

libavcodec/png_parser.c:81:33: <LHS trace>
79.         ppc->pc.state = (ppc->pc.state << 8) | buf[i];
80.         if (ppc->chunk_pos == 3) {
81.             ppc->chunk_length = AV_RL32(&ppc->pc.state);
                                    ^
82.             if (ppc->chunk_length > 0x7fffffff) {
83.                 ppc->chunk_pos = ppc->pc.frame_start_found = 0;

libavcodec/png_parser.c:81:33: Call
79.         ppc->pc.state = (ppc->pc.state << 8) | buf[i];
80.         if (ppc->chunk_pos == 3) {
81.             ppc->chunk_length = AV_RL32(&ppc->pc.state);
                                    ^
82.             if (ppc->chunk_length > 0x7fffffff) {
83.                 ppc->chunk_pos = ppc->pc.frame_start_found = 0;

libavutil/ppc/intreadwrite.h:48:5: Assignment
  46.     uint32_t v;
  47.     __asm__ ("lwbrx   %0, %y1" : "=r"(v) : "Z"(*(const uint32_t*)p));
  48.     return v;
          ^
  49. }
  50. 

libavcodec/png_parser.c:81:13: Assignment
79.         ppc->pc.state = (ppc->pc.state << 8) | buf[i];
80.         if (ppc->chunk_pos == 3) {
81.             ppc->chunk_length = AV_RL32(&ppc->pc.state);
                ^
82.             if (ppc->chunk_length > 0x7fffffff) {
83.                 ppc->chunk_pos = ppc->pc.frame_start_found = 0;

libavcodec/png_parser.c:86:13: Binary operation: ([-oo, 2147483647] + 4):signed32
84.                 goto flush;
85.             }
86.             ppc->chunk_length += 4;
                ^
87.         } else if (ppc->chunk_pos == 7) {
88.             if (ppc->chunk_length >= buf_size - i)
