libavcodec/svq3.c:1280: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1273:33: Call
1271.             else if (h->pict_type == AV_PICTURE_TYPE_B && mb_type >= 4)
1272.                 mb_type += 4;
1273.             if (mb_type > 33 || svq3_decode_mb(s, mb_type)) {
                                      ^
1274.                 av_log(h->avctx, AV_LOG_ERROR,
1275.                        "error while decoding MB %d %d\n", sl->mb_x, sl->mb_y);

libavcodec/svq3.c:511:17: Call
  509.         } else {
  510.             mb_type = FFMIN(s->next_pic->mb_type[mb_xy], 6);
  511.             if (svq3_mc_dir(s, mb_type, PREDICT_MODE, 0, 0) < 0)
                       ^
  512.                 return -1;
  513.             if (svq3_mc_dir(s, mb_type, PREDICT_MODE, 1, 1) < 0)

libavcodec/svq3.c:391:17: Call
    389. 
    390.             if (mode != PREDICT_MODE) {
    391.                 pred_motion(h, sl, k, part_width >> 2, dir, 1, &mx, &my);
                         ^
    392.             } else {
    393.                 mx = s->next_pic->motion_val[0][b_xy][0] << 1;

libavcodec/h264_mvpred.h:95:1: Parameter `sl->mb_field_decoding_flag`
      93.  * @param my the y component of the predicted motion vector
      94.  */
      95. static av_always_inline void pred_motion(const H264Context *const h,
          ^
      96.                                          H264SliceContext *sl,
      97.                                          int n,

libavcodec/h264_mvpred.h:119:20: Call
      117.  */
      118. 
      119.     diagonal_ref = fetch_diagonal_mv(h, sl, &C, index8, list, part_width);
                              ^
      120.     match_count  = (diagonal_ref == ref) + (top_ref == ref) + (left_ref == ref);
      121.     tprintf(h->avctx, "pred_motion match_count=%d\n", match_count);

libavcodec/h264_mvpred.h:38:1: Parameter `sl->mb_field_decoding_flag`
        36. #include <assert.h>
        37. 
        38. static av_always_inline int fetch_diagonal_mv(const H264Context *h, H264SliceContext *sl,
            ^
        39.                                               const int16_t **C,
        40.                                               int i, int list, int part_width)

libavcodec/svq3.c:1280:17: Call
1278. 
1279.             if (mb_type != 0)
1280.                 ff_h264_hl_decode_mb(h, &h->slice_ctx[0]);
                      ^
1281. 
1282.             if (h->pict_type != AV_PICTURE_TYPE_B && !h->low_delay)

libavcodec/h264_mb.c:812:1: Parameter `sl->list_count`
  810. #include "h264_mb_template.c"
  811. 
  812. void ff_h264_hl_decode_mb(const H264Context *h, H264SliceContext *sl)
       ^
  813. {
  814.     const int mb_xy   = sl->mb_xy;

libavcodec/h264_mb.c:821:13: Call
  819.     if (CHROMA444(h)) {
  820.         if (is_complex || h->pixel_shift)
  821.             hl_decode_mb_444_complex(h, sl);
                   ^
  822.         else
  823.             hl_decode_mb_444_simple_8(h, sl);

libavcodec/h264_mb_template.c:275:1: Parameter `sl->list_count`
    273. #include "h264_mc_template.c"
    274. 
    275. static av_noinline void FUNC(hl_decode_mb_444)(const H264Context *h, H264SliceContext *sl)
         ^
    276. {
    277.     const int mb_x    = sl->mb_x;

libavcodec/h264_mb_template.c:358:13: Call
    356.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    357.         } else {
    358.             FUNC(hl_motion_444)(h, sl, dest[0], dest[1], dest[2],
                     ^
    359.                       h->qpel_put, h->h264chroma.put_h264_chroma_pixels_tab,
    360.                       h->qpel_avg, h->h264chroma.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:64:1: Parameter `sl->list_count`
      62. }
      63. 
      64. static void MCFUNC(hl_motion)(const H264Context *h, H264SliceContext *sl,
          ^
      65.                               uint8_t *dest_y,
      66.                               uint8_t *dest_cb, uint8_t *dest_cr,

libavcodec/h264_mc_template.c:80:9: Call
      78. 
      79.     if (HAVE_THREADS && (h->avctx->active_thread_type & FF_THREAD_FRAME))
      80.         await_references(h, sl);
                  ^
      81.     prefetch_motion(h, sl, 0, PIXEL_SHIFT, CHROMA_IDC);
      82. 

libavcodec/h264_mb.c:96:1: <LHS trace>
94.  * @param h the H264 context
95.  */
96. static void await_references(const H264Context *h, H264SliceContext *sl)
    ^
97. {
98.     const int mb_xy   = sl->mb_xy;

libavcodec/h264_mb.c:96:1: Parameter `sl->list_count`
        94.  * @param h the H264 context
        95.  */
        96. static void await_references(const H264Context *h, H264SliceContext *sl)
            ^
        97. {
        98.     const int mb_xy   = sl->mb_xy;

libavcodec/h264_mb.c:166:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        164.     }
        165. 
        166.     for (list = sl->list_count - 1; list >= 0; list--)
                      ^
        167.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        168.             int row = refs[list][ref];
