libavformat/mxfdec.c:360: error: Integer Overflow L2
  ([-oo, 238609294] × 18):signed32.

libavformat/mxfdec.c:350:20: <LHS trace>
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
                        ^
351.     int item_len = get_be32(pb);
352. 

libavformat/mxfdec.c:350:20: Call
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
                        ^
351.     int item_len = get_be32(pb);
352. 

libavformat/aviobuf.c:529:11: Call
  527. {
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
                 ^
  530.     val |= get_be16(s);
  531.     return val;

libavformat/aviobuf.c:514:11: Call
    512. {
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
                   ^
    515.     val |= get_byte(s);
    516.     return val;

libavformat/aviobuf.c:397:5: Assignment
      395.     if (s->buf_ptr < s->buf_end)
      396.         return *s->buf_ptr++;
      397.     return 0;
               ^
      398. }
      399. 

libavformat/aviobuf.c:514:5: Assignment
    512. {
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
             ^
    515.     val |= get_byte(s);
    516.     return val;

libavformat/aviobuf.c:515:5: Assignment
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
    515.     val |= get_byte(s);
             ^
    516.     return val;
    517. }

libavformat/aviobuf.c:516:5: Assignment
    514.     val = get_byte(s) << 8;
    515.     val |= get_byte(s);
    516.     return val;
             ^
    517. }
    518. 

libavformat/aviobuf.c:529:5: Assignment
  527. {
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
           ^
  530.     val |= get_be16(s);
  531.     return val;

libavformat/aviobuf.c:530:5: Assignment
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
  530.     val |= get_be16(s);
           ^
  531.     return val;
  532. }

libavformat/aviobuf.c:531:5: Assignment
  529.     val = get_be16(s) << 16;
  530.     val |= get_be16(s);
  531.     return val;
           ^
  532. }
  533. 

libavformat/mxfdec.c:350:5: Assignment
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
         ^
351.     int item_len = get_be32(pb);
352. 

libavformat/mxfdec.c:351:20: <RHS trace>
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
                        ^
352. 
353.     if (item_len != 18) {

libavformat/mxfdec.c:351:20: Call
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
                        ^
352. 
353.     if (item_len != 18) {

libavformat/aviobuf.c:529:11: Call
  527. {
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
                 ^
  530.     val |= get_be16(s);
  531.     return val;

libavformat/aviobuf.c:514:11: Call
    512. {
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
                   ^
    515.     val |= get_byte(s);
    516.     return val;

libavformat/aviobuf.c:397:5: Assignment
      395.     if (s->buf_ptr < s->buf_end)
      396.         return *s->buf_ptr++;
      397.     return 0;
               ^
      398. }
      399. 

libavformat/aviobuf.c:514:5: Assignment
    512. {
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
             ^
    515.     val |= get_byte(s);
    516.     return val;

libavformat/aviobuf.c:515:5: Assignment
    513.     unsigned int val;
    514.     val = get_byte(s) << 8;
    515.     val |= get_byte(s);
             ^
    516.     return val;
    517. }

libavformat/aviobuf.c:516:5: Assignment
    514.     val = get_byte(s) << 8;
    515.     val |= get_byte(s);
    516.     return val;
             ^
    517. }
    518. 

libavformat/aviobuf.c:529:5: Assignment
  527. {
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
           ^
  530.     val |= get_be16(s);
  531.     return val;

libavformat/aviobuf.c:530:5: Assignment
  528.     unsigned int val;
  529.     val = get_be16(s) << 16;
  530.     val |= get_be16(s);
           ^
  531.     return val;
  532. }

libavformat/aviobuf.c:531:5: Assignment
  529.     val = get_be16(s) << 16;
  530.     val |= get_be16(s);
  531.     return val;
           ^
  532. }
  533. 

libavformat/mxfdec.c:351:5: Assignment
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
         ^
352. 
353.     if (item_len != 18) {

libavformat/mxfdec.c:360:23: Binary operation: ([-oo, 238609294] × 18):signed32
358.         return -1;
359.     mxf->local_tags_count = item_num;
360.     mxf->local_tags = av_malloc(item_num*item_len);
                           ^
361.     if (!mxf->local_tags)
362.         return -1;
