libavcodec/svq3.c:1063: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1063:17: Call
1061. 
1062.             if (mb_type != 0) {
1063.                 ff_h264_hl_decode_mb (h);
                      ^
1064.             }
1065. 

libavcodec/h264.c:2442:1: Parameter `h->list_count`
  2440. }
  2441. 
  2442. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2443. {
  2444.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:2451:13: Call
  2449.     if (CHROMA444) {
  2450.         if (is_complex || h->pixel_shift)
  2451.             hl_decode_mb_444_complex(h);
                    ^
  2452.         else
  2453.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2432:1: Parameter `h->list_count`
    2430. }
    2431. 
    2432. static void av_noinline hl_decode_mb_444_complex(H264Context *h)
          ^
    2433. {
    2434.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);

libavcodec/h264.c:2434:5: Call
    2432. static void av_noinline hl_decode_mb_444_complex(H264Context *h)
    2433. {
    2434.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2435. }
    2436. 

libavcodec/h264.c:2309:1: Parameter `h->list_count`
      2307. }
      2308. 
      2309. static av_always_inline void hl_decode_mb_444_internal(H264Context *h,
            ^
      2310.                                                        int simple,
      2311.                                                        int pixel_shift)

libavcodec/svq3.c:1063:17: Call
1061. 
1062.             if (mb_type != 0) {
1063.                 ff_h264_hl_decode_mb (h);
                      ^
1064.             }
1065. 

libavcodec/h264.c:2442:1: Parameter `h->list_count`
  2440. }
  2441. 
  2442. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2443. {
  2444.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:2451:13: Call
  2449.     if (CHROMA444) {
  2450.         if (is_complex || h->pixel_shift)
  2451.             hl_decode_mb_444_complex(h);
                    ^
  2452.         else
  2453.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2432:1: Parameter `h->list_count`
    2430. }
    2431. 
    2432. static void av_noinline hl_decode_mb_444_complex(H264Context *h)
          ^
    2433. {
    2434.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);

libavcodec/h264.c:2434:5: Call
    2432. static void av_noinline hl_decode_mb_444_complex(H264Context *h)
    2433. {
    2434.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2435. }
    2436. 

libavcodec/h264.c:2309:1: Parameter `h->list_count`
      2307. }
      2308. 
      2309. static av_always_inline void hl_decode_mb_444_internal(H264Context *h,
            ^
      2310.                                                        int simple,
      2311.                                                        int pixel_shift)

libavcodec/h264.c:2394:13: Call
      2392.                                linesize, 0, 1, simple, pixel_shift);
      2393.         } else {
      2394.             hl_motion(h, dest[0], dest[1], dest[2],
                        ^
      2395.                       s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
      2396.                       s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:769:1: Parameter `h->list_count`
        767. }
        768. 
        769. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y,
             ^
        770.                                        uint8_t *dest_cb, uint8_t *dest_cr,
        771.                                        qpel_mc_func(*qpix_put)[16],

libavcodec/h264.c:786:9: Call
        784. 
        785.     if (HAVE_THREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
        786.         await_references(h);
                     ^
        787.     prefetch_motion(h, 0, pixel_shift, chroma_idc);
        788. 

libavcodec/h264.c:336:1: <LHS trace>
334.  * @param h the H264 context
335.  */
336. static void await_references(H264Context *h)
     ^
337. {
338.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:336:1: Parameter `h->list_count`
          334.  * @param h the H264 context
          335.  */
          336. static void await_references(H264Context *h)
               ^
          337. {
          338.     MpegEncContext *const s = &h->s;

libavcodec/h264.c:407:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
          405.     }
          406. 
          407.     for (list = h->list_count - 1; list >= 0; list--)
                        ^
          408.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
          409.             int row = refs[list][ref];
