libavcodec/flacdec.c:474: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `decode_subframe`.

libavcodec/flacdec.c:409:16: Call
407.     FLACFrameInfo fi;
408. 
409.     if ((ret = ff_flac_decode_frame_header(s->avctx, bc, &fi, 0)) < 0) {
                    ^
410.         av_log(s->avctx, AV_LOG_ERROR, "invalid frame header\n");
411.         return ret;

libavcodec/flac.c:57:10: Call
  55. 
  56.     /* frame sync code */
  57.     if ((bitstream_read(bc, 15) & 0x7FFF) != 0x7FFC) {
               ^
  58.         av_log(avctx, AV_LOG_ERROR + log_level_offset, "invalid sync code\n");
  59.         return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:182:1: Parameter `bc->bits_left`
    180. 
    181. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    182. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    183. {
    184.     if (!n)

libavcodec/flacdec.c:474:20: Call
472.     /* subframes */
473.     for (i = 0; i < s->channels; i++) {
474.         if ((ret = decode_subframe(s, i)) < 0)
                        ^
475.             return ret;
476.     }

libavcodec/flacdec.c:334:1: Parameter `s->bc.bits_left`
  332. }
  333. 
  334. static inline int decode_subframe(FLACContext *s, int channel)
       ^
  335. {
  336.     int32_t *decoded = s->decoded[channel];

libavcodec/flacdec.c:349:9: Call
  347.     }
  348. 
  349.     if (bitstream_read_bit(&s->bc)) {
               ^
  350.         av_log(s->avctx, AV_LOG_ERROR, "invalid subframe padding\n");
  351.         return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:144:1: Parameter `bc->bits_left`
    142. 
    143. /* Return one bit from the buffer. */
    144. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    145. {
    146.     if (!bc->bits_left)

libavcodec/bitstream.h:149:12: Call
    147.         refill_64(bc);
    148. 
    149.     return get_val(bc, 1);
                    ^
    150. }
    151. 

libavcodec/bitstream.h:129:1: <LHS trace>
127. }
128. 
129. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
130. {
131. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:129:1: Parameter `bc->bits_left`
      127. }
      128. 
      129. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      130. {
      131. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:129:1: <RHS trace>
127. }
128. 
129. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
130. {
131. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:129:1: Parameter `n`
      127. }
      128. 
      129. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      130. {
      131. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:138:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `decode_subframe` 
      136.     bc->bits <<= n;
      137. #endif
      138.     bc->bits_left -= n;
               ^
      139. 
      140.     return ret;
