libavformat/mxfdec.c:360: error: Integer Overflow L2
  ([-oo, 238609294] × 18):signed32.

libavformat/mxfdec.c:350:20: <LHS trace>
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
                        ^
351.     int item_len = get_be32(pb);
352. 

libavformat/mxfdec.c:350:20: Call
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
                        ^
351.     int item_len = get_be32(pb);
352. 

libavformat/aviobuf.c:510:11: Call
  508. {
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
                 ^
  511.     val |= get_be16(s);
  512.     return val;

libavformat/aviobuf.c:495:11: Call
    493. {
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
                   ^
    496.     val |= get_byte(s);
    497.     return val;

libavformat/aviobuf.c:373:13: Assignment
      371.             return *s->buf_ptr++;
      372.         else
      373.             return 0;
                       ^
      374.     }
      375. }

libavformat/aviobuf.c:495:5: Assignment
    493. {
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
             ^
    496.     val |= get_byte(s);
    497.     return val;

libavformat/aviobuf.c:496:5: Assignment
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
    496.     val |= get_byte(s);
             ^
    497.     return val;
    498. }

libavformat/aviobuf.c:497:5: Assignment
    495.     val = get_byte(s) << 8;
    496.     val |= get_byte(s);
    497.     return val;
             ^
    498. }
    499. 

libavformat/aviobuf.c:510:5: Assignment
  508. {
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
           ^
  511.     val |= get_be16(s);
  512.     return val;

libavformat/aviobuf.c:511:5: Assignment
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
  511.     val |= get_be16(s);
           ^
  512.     return val;
  513. }

libavformat/aviobuf.c:512:5: Assignment
  510.     val = get_be16(s) << 16;
  511.     val |= get_be16(s);
  512.     return val;
           ^
  513. }
  514. 

libavformat/mxfdec.c:350:5: Assignment
348. {
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
         ^
351.     int item_len = get_be32(pb);
352. 

libavformat/mxfdec.c:351:20: <RHS trace>
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
                        ^
352. 
353.     if (item_len != 18) {

libavformat/mxfdec.c:351:20: Call
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
                        ^
352. 
353.     if (item_len != 18) {

libavformat/aviobuf.c:510:11: Call
  508. {
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
                 ^
  511.     val |= get_be16(s);
  512.     return val;

libavformat/aviobuf.c:495:11: Call
    493. {
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
                   ^
    496.     val |= get_byte(s);
    497.     return val;

libavformat/aviobuf.c:373:13: Assignment
      371.             return *s->buf_ptr++;
      372.         else
      373.             return 0;
                       ^
      374.     }
      375. }

libavformat/aviobuf.c:495:5: Assignment
    493. {
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
             ^
    496.     val |= get_byte(s);
    497.     return val;

libavformat/aviobuf.c:496:5: Assignment
    494.     unsigned int val;
    495.     val = get_byte(s) << 8;
    496.     val |= get_byte(s);
             ^
    497.     return val;
    498. }

libavformat/aviobuf.c:497:5: Assignment
    495.     val = get_byte(s) << 8;
    496.     val |= get_byte(s);
    497.     return val;
             ^
    498. }
    499. 

libavformat/aviobuf.c:510:5: Assignment
  508. {
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
           ^
  511.     val |= get_be16(s);
  512.     return val;

libavformat/aviobuf.c:511:5: Assignment
  509.     unsigned int val;
  510.     val = get_be16(s) << 16;
  511.     val |= get_be16(s);
           ^
  512.     return val;
  513. }

libavformat/aviobuf.c:512:5: Assignment
  510.     val = get_be16(s) << 16;
  511.     val |= get_be16(s);
  512.     return val;
           ^
  513. }
  514. 

libavformat/mxfdec.c:351:5: Assignment
349.     MXFContext *mxf = arg;
350.     int item_num = get_be32(pb);
351.     int item_len = get_be32(pb);
         ^
352. 
353.     if (item_len != 18) {

libavformat/mxfdec.c:360:23: Binary operation: ([-oo, 238609294] × 18):signed32
358.         return -1;
359.     mxf->local_tags_count = item_num;
360.     mxf->local_tags = av_malloc(item_num*item_len);
                           ^
361.     if (!mxf->local_tags)
362.         return -1;
