libavformat/asfdec.c:1072: error: Integer Overflow L2
  ([min(0, `s->priv_data->nb_sub`), 1+max(0, `s->priv_data->nb_sub`)] - 1):unsigned32.

libavformat/asfdec.c:1041:1: <LHS trace>
1039.     } while(0)
1040. 
1041. static int asf_read_subpayload(AVFormatContext *s, AVPacket *pkt, int is_header)
      ^
1042. {
1043.     ASFContext *asf = s->priv_data;

libavformat/asfdec.c:1041:1: Parameter `s->priv_data->nb_sub`
1039.     } while(0)
1040. 
1041. static int asf_read_subpayload(AVFormatContext *s, AVPacket *pkt, int is_header)
      ^
1042. {
1043.     ASFContext *asf = s->priv_data;

libavformat/asfdec.c:1072:5: Binary operation: ([min(0, s->priv_data->nb_sub), 1+max(0, s->priv_data->nb_sub)] - 1):unsigned32
1070.     if (sub_len)
1071.         asf->nb_sub++;
1072.     pkt->dts = asf->sub_dts + (asf->nb_sub - 1) * asf->dts_delta - asf->preroll;
          ^
1073.     if (asf->nb_mult_left && (avio_tell(pb) >=
1074.                               (asf->sub_header_offset + asf->mult_sub_len))) {
