libavcodec/bink.c:823: error: Integer Overflow L2
  ([1, +oo] - [1, max(13, `c->bundle[*].len`)]):unsigned32 by call to `binkb_read_bundle`.

libavcodec/bink.c:795:1: Parameter `c->bundle[*].len`
793. }
794. 
795. static int binkb_decode_plane(BinkContext *c, AVFrame *frame, BitstreamContext *bc,
     ^
796.                               int plane_idx, int is_key, int is_chroma)
797. {

libavcodec/bink.c:814:5: Call
812.     int bh = is_chroma ? (c->avctx->height + 15) >> 4 : (c->avctx->height + 7) >> 3;
813. 
814.     binkb_init_bundles(c);
         ^
815.     ref_start = frame->data[plane_idx];
816.     ref_end   = frame->data[plane_idx] + (bh * frame->linesize[plane_idx] + bw) * 8;

libavcodec/bink.c:532:1: Parameter `c->bundle[*].len`
  530. }
  531. 
  532. static av_cold void binkb_init_bundles(BinkContext *c)
       ^
  533. {
  534.     int i;

libavcodec/bink.c:823:24: Call
821.     for (by = 0; by < bh; by++) {
822.         for (i = 0; i < BINKB_NB_SRC; i++) {
823.             if ((ret = binkb_read_bundle(c, bc, i)) < 0)
                            ^
824.                 return ret;
825.         }

libavcodec/bink.c:539:1: Parameter `c->bundle[*].len`
  537. }
  538. 
  539. static int binkb_read_bundle(BinkContext *c, BitstreamContext *bc, int bundle_num)
       ^
  540. {
  541.     const int bits = binkb_bundle_sizes[bundle_num];

libavcodec/bink.c:547:5: Call
  545.     int i, len;
  546. 
  547.     CHECK_READ_VAL(bc, b, len);
           ^
  548.     if (b->data_end - b->cur_dec < len * (1 + (bits > 8)))
  549.         return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:183:1: Parameter `n`
    181. 
    182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    184. {
    185.     if (!n)

libavcodec/bitstream.h:194:12: Call
    192.     }
    193. 
    194.     return get_val(bc, n);
                    ^
    195. }
    196. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([1, +oo] - [1, max(13, c->bundle[*].len)]):unsigned32 by call to `binkb_read_bundle` 
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;
