libavcodec/h264.c:4129: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/h264.c:4124:23: Call
4122.         for (;;) {
4123.             // START_TIMER
4124.             int ret = ff_h264_decode_mb_cabac(h);
                            ^
4125.             int eos;
4126.             // STOP_TIMER("decode_mb_cabac")

libavcodec/h264_cabac.c:1876:1: Parameter `(*h->cur_pic.qscale_table).*.strlen`
  1874.  * @return 0 if OK, ER_AC_ERROR / ER_DC_ERROR / ER_MV_ERROR if an error is noticed
  1875.  */
  1876. int ff_h264_decode_mb_cabac(H264Context *h) {
        ^
  1877.     int mb_xy;
  1878.     int mb_type, partition_count, cbp = 0;

libavcodec/h264.c:4129:17: Call
4127. 
4128.             if (ret >= 0)
4129.                 ff_h264_hl_decode_mb(h);
                      ^
4130. 
4131.             // FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264.c:2435:1: Parameter `h->list_count`
  2433. #include "h264_mb_template.c"
  2434. 
  2435. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2436. {
  2437.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:2443:13: Call
  2441.     if (CHROMA444(h)) {
  2442.         if (is_complex || h->pixel_shift)
  2443.             hl_decode_mb_444_complex(h);
                    ^
  2444.         else
  2445.             hl_decode_mb_444_simple_8(h);

libavcodec/h264_mb_template.c:277:1: Parameter `h->list_count`
    275. #include "h264_mc_template.c"
    276. 
    277. static av_noinline void FUNC(hl_decode_mb_444)(H264Context *h)
         ^
    278. {
    279.     const int mb_x    = h->mb_x;

libavcodec/h264_mb_template.c:360:13: Call
    358.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    359.         } else {
    360.             FUNC(hl_motion_444)(h, dest[0], dest[1], dest[2],
                     ^
    361.                       h->me.qpel_put, h->h264chroma.put_h264_chroma_pixels_tab,
    362.                       h->me.qpel_avg, h->h264chroma.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:61:1: Parameter `h->list_count`
      59. }
      60. 
      61. static void MCFUNC(hl_motion)(H264Context *h, uint8_t *dest_y,
          ^
      62.                               uint8_t *dest_cb, uint8_t *dest_cr,
      63.                               qpel_mc_func(*qpix_put)[16],

libavcodec/h264_mc_template.c:76:9: Call
      74. 
      75.     if (HAVE_THREADS && (h->avctx->active_thread_type & FF_THREAD_FRAME))
      76.         await_references(h);
                  ^
      77.     prefetch_motion(h, 0, PIXEL_SHIFT, CHROMA_IDC);
      78. 

libavcodec/h264.c:672:1: <LHS trace>
670.  * @param h the H264 context
671.  */
672. static void await_references(H264Context *h)
     ^
673. {
674.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:672:1: Parameter `h->list_count`
        670.  * @param h the H264 context
        671.  */
        672. static void await_references(H264Context *h)
             ^
        673. {
        674.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:742:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        740.     }
        741. 
        742.     for (list = h->list_count - 1; list >= 0; list--)
                      ^
        743.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        744.             int row = refs[list][ref];
