libavcodec/4xm.c:894: error: Integer Overflow L2
  ([min(8, `*avpkt->data`), +oo] - [-oo, 134217748]):unsigned32 by call to `decode_p_frame`.

libavcodec/4xm.c:791:1: Parameter `avpkt->data->l`
789. }
790. 
791. static int decode_frame(AVCodecContext *avctx, void *data,
     ^
792.                         int *got_frame, AVPacket *avpkt)
793. {

libavcodec/4xm.c:875:9: Assignment
873.     } else {
874.         buf        = buf      + 12;
875.         frame_size = buf_size - 12;
             ^
876.     }
877. 

libavcodec/4xm.c:894:20: Call
892.     } else if (frame_4cc == AV_RL32("pfrm") || frame_4cc == AV_RL32("pfr2")) {
893.         picture->pict_type = AV_PICTURE_TYPE_P;
894.         if ((ret = decode_p_frame(f, buf, frame_size)) < 0)
                        ^
895.             return ret;
896.     } else if (frame_4cc == AV_RL32("snd_")) {

libavcodec/4xm.c:404:1: <LHS trace>
402. }
403. 
404. static int decode_p_frame(FourXContext *f, const uint8_t *buf, int length)
     ^
405. {
406.     int x, y;

libavcodec/4xm.c:404:1: Parameter `length`
  402. }
  403. 
  404. static int decode_p_frame(FourXContext *f, const uint8_t *buf, int length)
       ^
  405. {
  406.     int x, y;

libavcodec/4xm.c:404:1: <RHS trace>
402. }
403. 
404. static int decode_p_frame(FourXContext *f, const uint8_t *buf, int length)
     ^
405. {
406.     int x, y;

libavcodec/4xm.c:404:1: Parameter `length`
  402. }
  403. 
  404. static int decode_p_frame(FourXContext *f, const uint8_t *buf, int length)
       ^
  405. {
  406.     int x, y;

libavcodec/4xm.c:452:5: Assignment
  450. 
  451.     wordstream_offset = extra + bitstream_size;
  452.     bytestream_offset = extra + bitstream_size + wordstream_size;
           ^
  453.     bytestream2_init(&f->g2, buf + wordstream_offset,
  454.                      length - wordstream_offset);

libavcodec/4xm.c:455:5: Binary operation: ([min(8, *avpkt->data), +oo] - [-oo, 134217748]):unsigned32 by call to `decode_p_frame` 
  453.     bytestream2_init(&f->g2, buf + wordstream_offset,
  454.                      length - wordstream_offset);
  455.     bytestream2_init(&f->g, buf + bytestream_offset,
           ^
  456.                      length - bytestream_offset);
  457. 
