libavcodec/svq3.c:1123: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1123:17: Call
1121. 
1122.             if (mb_type != 0)
1123.                 ff_h264_hl_decode_mb(h);
                      ^
1124. 
1125.             if (s->pict_type != AV_PICTURE_TYPE_B && !s->low_delay)

libavcodec/h264.c:1932:1: Parameter `h->list_count`
  1930. #include "h264_mb_template.c"
  1931. 
  1932. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  1933. {
  1934.     MpegEncContext *const s = &h->s;

libavcodec/svq3.c:1123:17: Call
1121. 
1122.             if (mb_type != 0)
1123.                 ff_h264_hl_decode_mb(h);
                      ^
1124. 
1125.             if (s->pict_type != AV_PICTURE_TYPE_B && !s->low_delay)

libavcodec/h264.c:1932:1: Parameter `h->list_count`
  1930. #include "h264_mb_template.c"
  1931. 
  1932. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  1933. {
  1934.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:1941:13: Call
  1939.     if (CHROMA444) {
  1940.         if (is_complex || h->pixel_shift)
  1941.             hl_decode_mb_444_complex(h);
                    ^
  1942.         else
  1943.             hl_decode_mb_444_simple_8(h);

libavcodec/h264_mb_template.c:278:1: Parameter `h->list_count`
    276. #include "h264_mc_template.c"
    277. 
    278. static av_noinline void FUNC(hl_decode_mb_444)(H264Context *h)
         ^
    279. {
    280.     MpegEncContext *const s = &h->s;

libavcodec/h264_mb_template.c:362:13: Call
    360.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    361.         } else {
    362.             FUNC(hl_motion_444)(h, dest[0], dest[1], dest[2],
                     ^
    363.                       s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
    364.                       s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:61:1: Parameter `h->list_count`
      59. }
      60. 
      61. static void MCFUNC(hl_motion)(H264Context *h, uint8_t *dest_y,
          ^
      62.                               uint8_t *dest_cb, uint8_t *dest_cr,
      63.                               qpel_mc_func(*qpix_put)[16],

libavcodec/h264_mc_template.c:77:9: Call
      75. 
      76.     if (HAVE_THREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
      77.         await_references(h);
                  ^
      78.     prefetch_motion(h, 0, PIXEL_SHIFT, CHROMA_IDC);
      79. 

libavcodec/h264.c:345:1: <LHS trace>
343.  * @param h the H264 context
344.  */
345. static void await_references(H264Context *h)
     ^
346. {
347.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:345:1: Parameter `h->list_count`
        343.  * @param h the H264 context
        344.  */
        345. static void await_references(H264Context *h)
             ^
        346. {
        347.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:416:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        414.     }
        415. 
        416.     for (list = h->list_count - 1; list >= 0; list--)
                      ^
        417.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        418.             int row = refs[list][ref];
