libavformat/oggparsespeex.c:68: error: Integer Overflow L1
  (86054 × 86054):signed32.

libavformat/oggparsespeex.c:56:9: <LHS trace>
54.         int frames_per_packet;
55.         st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
56.         st->codec->codec_id = CODEC_ID_SPEEX;
            ^
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);

libavformat/oggparsespeex.c:56:9: Assignment
54.         int frames_per_packet;
55.         st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
56.         st->codec->codec_id = CODEC_ID_SPEEX;
            ^
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);

libavformat/oggparsespeex.c:58:9: Assignment
56.         st->codec->codec_id = CODEC_ID_SPEEX;
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);
            ^
59.         st->codec->channels = AV_RL32(p + 48);
60. 

libavformat/oggparsespeex.c:59:9: Assignment
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);
59.         st->codec->channels = AV_RL32(p + 48);
            ^
60. 
61.         /* We treat the whole Speex packet as a single frame everywhere Speex

libavformat/oggparsespeex.c:65:9: Assignment
63.            and joining individual Speex frames, which are not always
64.            byte-aligned. */
65.         st->codec->frame_size = AV_RL32(p + 56);
            ^
66.         frames_per_packet     = AV_RL32(p + 64);
67.         if (frames_per_packet)

libavformat/oggparsespeex.c:56:9: <RHS trace>
54.         int frames_per_packet;
55.         st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
56.         st->codec->codec_id = CODEC_ID_SPEEX;
            ^
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);

libavformat/oggparsespeex.c:56:9: Assignment
54.         int frames_per_packet;
55.         st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
56.         st->codec->codec_id = CODEC_ID_SPEEX;
            ^
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);

libavformat/oggparsespeex.c:58:9: Assignment
56.         st->codec->codec_id = CODEC_ID_SPEEX;
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);
            ^
59.         st->codec->channels = AV_RL32(p + 48);
60. 

libavformat/oggparsespeex.c:59:9: Assignment
57. 
58.         st->codec->sample_rate = AV_RL32(p + 36);
59.         st->codec->channels = AV_RL32(p + 48);
            ^
60. 
61.         /* We treat the whole Speex packet as a single frame everywhere Speex

libavformat/oggparsespeex.c:65:9: Assignment
63.            and joining individual Speex frames, which are not always
64.            byte-aligned. */
65.         st->codec->frame_size = AV_RL32(p + 56);
            ^
66.         frames_per_packet     = AV_RL32(p + 64);
67.         if (frames_per_packet)

libavformat/oggparsespeex.c:66:9: Assignment
64.            byte-aligned. */
65.         st->codec->frame_size = AV_RL32(p + 56);
66.         frames_per_packet     = AV_RL32(p + 64);
            ^
67.         if (frames_per_packet)
68.             st->codec->frame_size *= frames_per_packet;

libavformat/oggparsespeex.c:68:13: Binary operation: (86054 × 86054):signed32
66.         frames_per_packet     = AV_RL32(p + 64);
67.         if (frames_per_packet)
68.             st->codec->frame_size *= frames_per_packet;
                ^
69. 
70.         st->codec->extradata_size = os->psize;
