libavcodec/truemotion2.c:310: error: Integer Overflow L2
  (32 - [0, 64]):unsigned32 by call to `tm2_read_deltas`.

libavcodec/truemotion2.c:309:13: Call
307.             if (skip <= pos)
308.                 return AVERROR_INVALIDDATA;
309.             bitstream_init(&ctx->bc, buf + pos, (skip - pos) * 8);
                 ^
310.             if ((ret = tm2_read_deltas(ctx, stream_id)) < 0)
311.                 return ret;

libavcodec/bitstream.h:85:9: Assignment
  83.         bc->buffer    =
  84.         bc->ptr       = NULL;
  85.         bc->bits_left = 0;
              ^
  86.         return AVERROR_INVALIDDATA;
  87.     }

libavcodec/truemotion2.c:310:24: Call
308.                 return AVERROR_INVALIDDATA;
309.             bitstream_init(&ctx->bc, buf + pos, (skip - pos) * 8);
310.             if ((ret = tm2_read_deltas(ctx, stream_id)) < 0)
                            ^
311.                 return ret;
312.             bytestream2_skip(&gb, ((bitstream_tell(&ctx->bc) + 31) >> 5) << 2);

libavcodec/truemotion2.c:252:1: Parameter `ctx->bc.bits_left`
  250. }
  251. 
  252. static int tm2_read_deltas(TM2Context *ctx, int stream_id)
       ^
  253. {
  254.     int d, mb;

libavcodec/truemotion2.c:257:10: Call
  255.     int i, v;
  256. 
  257.     d  = bitstream_read(&ctx->bc, 9);
                ^
  258.     mb = bitstream_read(&ctx->bc, 5);
  259. 

libavcodec/bitstream.h:183:1: Parameter `n`
    181. 
    182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    184. {
    185.     if (!n)

libavcodec/bitstream.h:189:9: Call
    187. 
    188.     if (n > bc->bits_left) {
    189.         refill_32(bc);
                 ^
    190.         if (bc->bits_left < 32)
    191.             bc->bits_left = n;

libavcodec/bitstream.h:60:1: <RHS trace>
58. }
59. 
60. static inline void refill_32(BitstreamContext *bc)
    ^
61. {
62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:60:1: Parameter `bc->bits_left`
      58. }
      59. 
      60. static inline void refill_32(BitstreamContext *bc)
          ^
      61. {
      62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:68:5: Binary operation: (32 - [0, 64]):unsigned32 by call to `tm2_read_deltas` 
      66.     bc->bits       = (uint64_t)AV_RL32(bc->ptr) << bc->bits_left | bc->bits;
      67. #else
      68.     bc->bits       = bc->bits | (uint64_t)AV_RB32(bc->ptr) << (32 - bc->bits_left);
              ^
      69. #endif
      70.     bc->ptr       += 4;
