libavcodec/svq3.c:1520: error: Integer Overflow L2
  ([-1, +oo] - 1):unsigned32 by call to `svq3_decode_mb`.

libavcodec/svq3.c:1514:23: Call
1512.             }
1513. 
1514.             mb_type = get_interleaved_ue_golomb(&s->bc_slice);
                            ^
1515. 
1516.             if (s->pict_type == AV_PICTURE_TYPE_I)

libavcodec/golomb.h:112:9: Call
  110.     if (buf & 0xAA800000) {
  111.         buf >>= 32 - 8;
  112.         bitstream_skip(bc, ff_interleaved_golomb_vlc_len[buf]);
               ^
  113. 
  114.         return ff_interleaved_ue_golomb_vlc_code[buf];

libavcodec/bitstream.h:241:1: Parameter `n`
    239. 
    240. /* Skip n bits in the buffer. */
    241. static inline void bitstream_skip(BitstreamContext *bc, unsigned n)
         ^
    242. {
    243.     if (n <= bc->bits_left)

libavcodec/bitstream.h:244:9: Call
    242. {
    243.     if (n <= bc->bits_left)
    244.         skip_remaining(bc, n);
                 ^
    245.     else {
    246.         n -= bc->bits_left;

libavcodec/bitstream.h:230:1: Parameter `n`
      228. }
      229. 
      230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
           ^
      231. {
      232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Assignment
      235.     bc->bits <<= n;
      236. #endif
      237.     bc->bits_left -= n;
               ^
      238. }
      239. 

libavcodec/svq3.c:1520:33: Call
1518.             else if (s->pict_type == AV_PICTURE_TYPE_B && mb_type >= 4)
1519.                 mb_type += 4;
1520.             if (mb_type > 33 || svq3_decode_mb(s, mb_type)) {
                                      ^
1521.                 av_log(s->avctx, AV_LOG_ERROR,
1522.                        "error while decoding MB %d %d\n", s->mb_x, s->mb_y);

libavcodec/svq3.c:714:1: Parameter `s->bc_slice.bits_left`
  712. }
  713. 
  714. static int svq3_decode_mb(SVQ3Context *s, unsigned int mb_type)
       ^
  715. {
  716.     int i, j, k, m, dir, mode;

libavcodec/svq3.c:751:39: Call
  749.             mode = THIRDPEL_MODE;
  750.         else if (s->halfpel_flag &&
  751.                  s->thirdpel_flag == !bitstream_read_bit(&s->bc_slice))
                                             ^
  752.             mode = HALFPEL_MODE;
  753.         else

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
    143. 
    144. /* Return one bit from the buffer. */
    145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    146. {
    147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
    148.         refill_64(bc);
    149. 
    150.     return get_val(bc, 1);
                    ^
    151. }
    152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([-1, +oo] - 1):unsigned32 by call to `svq3_decode_mb` 
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;
