libavcodec/h264_slice.c:1606: error: Integer Overflow L2
  ([0, +oo] - [0, 64]):unsigned32 by call to `ff_h264_fill_default_ref_list`.

libavcodec/h264_slice.c:1176:1: Parameter `h->ref_count[*]`
1174.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
1175.  */
1176. int ff_h264_decode_slice_header(H264Context *h, H264Context *h0)
      ^
1177. {
1178.     unsigned int first_mb_in_slice;

libavcodec/h264_slice.c:1606:9: Call
1604. 
1605.     if (!default_ref_list_done)
1606.         ff_h264_fill_default_ref_list(h);
              ^
1607. 
1608.     if (h->slice_type_nos != AV_PICTURE_TYPE_I) {

libavcodec/h264_refs.c:117:1: <LHS trace>
115. }
116. 
117. int ff_h264_fill_default_ref_list(H264Context *h)
     ^
118. {
119.     int i, len;

libavcodec/h264_refs.c:117:1: Parameter `h->ref_count[*]`
  115. }
  116. 
  117. int ff_h264_fill_default_ref_list(H264Context *h)
       ^
  118. {
  119.     int i, len;

libavcodec/h264_refs.c:117:1: <RHS trace>
115. }
116. 
117. int ff_h264_fill_default_ref_list(H264Context *h)
     ^
118. {
119.     int i, len;

libavcodec/h264_refs.c:117:1: Parameter `h->ref_count[*]`
  115. }
  116. 
  117. int ff_h264_fill_default_ref_list(H264Context *h)
       ^
  118. {
  119.     int i, len;

libavcodec/h264_refs.c:143:17: Binary operation: ([0, +oo] - [0, 64]):unsigned32 by call to `ff_h264_fill_default_ref_list` 
  141. 
  142.             if (len < h->ref_count[list])
  143.                 memset(&h->default_ref_list[list][len], 0, sizeof(H264Picture) * (h->ref_count[list] - len));
                       ^
  144.             lens[list] = len;
  145.         }
