libavcodec/mjpegdec.c:1475: error: Integer Overflow L2
  ([-oo, 4294967296] + 7):signed32 by call to `init_get_bits`.

libavcodec/mjpegdec.c:1461:22: Call
1459.     while (buf_ptr < buf_end) {
1460.         /* find start next marker */
1461.         start_code = ff_mjpeg_find_marker(s, &buf_ptr, buf_end,
                           ^
1462.                                           &unescaped_buf_ptr,
1463.                                           &unescaped_buf_size);

libavcodec/mjpegdec.c:1355:1: Parameter `*unescaped_buf_size`
  1353. }
  1354. 
  1355. int ff_mjpeg_find_marker(MJpegDecodeContext *s,
        ^
  1356.                          const uint8_t **buf_ptr, const uint8_t *buf_end,
  1357.                          const uint8_t **unescaped_buf_ptr,

libavcodec/mjpegdec.c:1475:13: Call
1473.                    start_code, buf_end - buf_ptr);
1474. 
1475.             init_get_bits(&s->gb, unescaped_buf_ptr, unescaped_buf_size * 8);
                  ^
1476. 
1477.             s->start_code = start_code;

libavcodec/get_bits.h:370:1: <LHS trace>
368.  * @param bit_size the size of the buffer in bits
369.  */
370. static inline void init_get_bits(GetBitContext *s, const uint8_t *buffer,
     ^
371.                                  int bit_size)
372. {

libavcodec/get_bits.h:370:1: Parameter `bit_size`
  368.  * @param bit_size the size of the buffer in bits
  369.  */
  370. static inline void init_get_bits(GetBitContext *s, const uint8_t *buffer,
       ^
  371.                                  int bit_size)
  372. {

libavcodec/get_bits.h:373:5: Binary operation: ([-oo, 4294967296] + 7):signed32 by call to `init_get_bits` 
  371.                                  int bit_size)
  372. {
  373.     int buffer_size = (bit_size+7)>>3;
           ^
  374.     if (buffer_size < 0 || bit_size < 0) {
  375.         buffer_size = bit_size = 0;
