libavcodec/8bps.c:106: error: Integer Overflow L2
  ([1, +oo] - [`*buf` + 2, 2+min(127, `*buf`)]):unsigned32.

libavcodec/8bps.c:60:1: <LHS trace>
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:60:1: Parameter `*buf`
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:104:38: Assignment
102.                         while(dlen > 0) {
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
                                          ^
105.                                         count++;
106.                                         dlen -= count + 1;

libavcodec/8bps.c:105:41: Assignment
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
                                             ^
106.                                         dlen -= count + 1;
107.                                         if (pixptr + count * px_inc > pixptr_end)

libavcodec/8bps.c:106:41: Assignment
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
106.                                         dlen -= count + 1;
                                             ^
107.                                         if (pixptr + count * px_inc > pixptr_end)
108.                                             break;

libavcodec/8bps.c:60:1: <RHS trace>
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:60:1: Parameter `*buf`
58.  *
59.  */
60. static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, const uint8_t *buf, int buf_size)
    ^
61. {
62.         EightBpsContext * const c = avctx->priv_data;

libavcodec/8bps.c:104:38: Assignment
102.                         while(dlen > 0) {
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
                                          ^
105.                                         count++;
106.                                         dlen -= count + 1;

libavcodec/8bps.c:105:41: Assignment
103.                                 if(dp + 1 >= buf+buf_size) return -1;
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
                                             ^
106.                                         dlen -= count + 1;
107.                                         if (pixptr + count * px_inc > pixptr_end)

libavcodec/8bps.c:106:41: Binary operation: ([1, +oo] - [*buf + 2, 2+min(127, *buf)]):unsigned32
104.                                 if ((count = *dp++) <= 127) {
105.                                         count++;
106.                                         dlen -= count + 1;
                                             ^
107.                                         if (pixptr + count * px_inc > pixptr_end)
108.                                             break;
