libavformat/idroqdec.c:187: error: Integer Overflow L2
  ([-oo, 2147483655] + 8):signed32 by call to `av_new_packet`.

libavformat/idroqdec.c:116:9: Assignment
114. 
115.         chunk_type = AV_RL16(&preamble[0]);
116.         chunk_size = AV_RL32(&preamble[2]);
             ^
117.         if(chunk_size > INT_MAX)
118.             return AVERROR_INVALIDDATA;

libavformat/idroqdec.c:187:17: Call
185.         case RoQ_QUAD_VQ:
186.             /* load up the packet */
187.             if (av_new_packet(pkt, chunk_size + RoQ_CHUNK_PREAMBLE_SIZE))
                     ^
188.                 return AVERROR(EIO);
189.             /* copy over preamble */

libavcodec/avpacket.c:61:1: <LHS trace>
59. }
60. 
61. int av_new_packet(AVPacket *pkt, int size)
    ^
62. {
63.     uint8_t *data = NULL;

libavcodec/avpacket.c:61:1: Parameter `size`
  59. }
  60. 
  61. int av_new_packet(AVPacket *pkt, int size)
      ^
  62. {
  63.     uint8_t *data = NULL;

libavcodec/avpacket.c:65:16: Binary operation: ([-oo, 2147483655] + 8):signed32 by call to `av_new_packet` 
  63.     uint8_t *data = NULL;
  64.     if ((unsigned)size < (unsigned)size + FF_INPUT_BUFFER_PADDING_SIZE)
  65.         data = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE);
                     ^
  66.     if (data) {
  67.         memset(data + size, 0, FF_INPUT_BUFFER_PADDING_SIZE);
