libavcodec/qdm2.c:1425: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `bitstream_read_bit`.

libavcodec/qdm2.c:1396:25: Call
1394.     while (1) {
1395.         if (q->superblocktype_2_3) {
1396.             while ((n = qdm2_get_vlc(bc, &vlc_tab_fft_tone_offset[local_int_8], 1, 2)) < 2) {
                              ^
1397.                 offset = 1;
1398.                 if (n == 0) {

libavcodec/qdm2.c:372:36: Call
  370.     /* stage-2, 3 bits exponent escape sequence */
  371.     if (value-- == 0)
  372.         value = bitstream_read(bc, bitstream_read(bc, 3) + 1);
                                          ^
  373. 
  374.     /* stage-3, optional */

libavcodec/bitstream.h:186:9: Assignment
    184. {
    185.     if (!n)
    186.         return 0;
                 ^
    187. 
    188.     if (n > bc->bits_left) {

libavcodec/qdm2.c:372:17: Call
  370.     /* stage-2, 3 bits exponent escape sequence */
  371.     if (value-- == 0)
  372.         value = bitstream_read(bc, bitstream_read(bc, 3) + 1);
                       ^
  373. 
  374.     /* stage-3, optional */

libavcodec/bitstream.h:183:1: Parameter `bc->bits_left`
    181. 
    182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    184. {
    185.     if (!n)

libavcodec/qdm2.c:1424:23: Call
1422. 
1423.         if (q->nb_channels > 1) {
1424.             channel = bitstream_read_bit(bc);
                            ^
1425.             stereo  = bitstream_read_bit(bc);
1426.         } else {

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
  143. 
  144. /* Return one bit from the buffer. */
  145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
       ^
  146. {
  147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
  148.         refill_64(bc);
  149. 
  150.     return get_val(bc, 1);
                  ^
  151. }
  152. 

libavcodec/bitstream.h:130:1: Parameter `n`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Assignment
    137.     bc->bits <<= n;
    138. #endif
    139.     bc->bits_left -= n;
             ^
    140. 
    141.     return ret;

libavcodec/qdm2.c:1425:23: Call
1423.         if (q->nb_channels > 1) {
1424.             channel = bitstream_read_bit(bc);
1425.             stereo  = bitstream_read_bit(bc);
                            ^
1426.         } else {
1427.             channel = 0;

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
  143. 
  144. /* Return one bit from the buffer. */
  145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
       ^
  146. {
  147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
  148.         refill_64(bc);
  149. 
  150.     return get_val(bc, 1);
                  ^
  151. }
  152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
    128. }
    129. 
    130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    131. {
    132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `bitstream_read_bit` 
    137.     bc->bits <<= n;
    138. #endif
    139.     bc->bits_left -= n;
             ^
    140. 
    141.     return ret;
