libavcodec/eamad.c:302: error: Integer Overflow L2
  ([-1, +oo] - 1):unsigned32 by call to `decode_mb`.

libavcodec/eamad.c:298:5: Call
296.     s->bbdsp.bswap16_buf(s->bitstream_buf, (const uint16_t *)(buf + bytestream2_tell(&gb)),
297.                          bytestream2_get_bytes_left(&gb) / 2);
298.     bitstream_init8(&s->bc, s->bitstream_buf, bytestream2_get_bytes_left(&gb));
         ^
299. 
300.     for (s->mb_y=0; s->mb_y < (avctx->height+15)/16; s->mb_y++)

libavcodec/bitstream.h:104:1: Parameter `bc->bits_left`
  102. 
  103. /* Initialize BitstreamContext with buffer size in bytes instead of bits. */
  104. static inline int bitstream_init8(BitstreamContext *bc, const uint8_t *buffer,
       ^
  105.                                   unsigned byte_size)
  106. {

libavcodec/eamad.c:302:13: Call
300.     for (s->mb_y=0; s->mb_y < (avctx->height+15)/16; s->mb_y++)
301.         for (s->mb_x=0; s->mb_x < (avctx->width +15)/16; s->mb_x++)
302.             decode_mb(s, frame, inter);
                 ^
303. 
304.     *got_frame = 1;

libavcodec/eamad.c:197:1: Parameter `s->bc.bits_left`
  195. }
  196. 
  197. static void decode_mb(MadContext *s, AVFrame *frame, int inter)
       ^
  198. {
  199.     int mv_map = 0;

libavcodec/eamad.c:204:17: Call
  202. 
  203.     if (inter) {
  204.         int v = bitstream_decode210(&s->bc);
                       ^
  205.         if (v < 2) {
  206.             mv_map = v ? bitstream_read(&s->bc, 6) : 63;

libavcodec/bitstream.h:372:1: Parameter `bc->bits_left`
    370. 
    371. /* Return decoded truncated unary code for the values 2, 1, 0. */
    372. static inline int bitstream_decode210(BitstreamContext *bc)
         ^
    373. {
    374.     if (bitstream_read_bit(bc))

libavcodec/bitstream.h:374:9: Call
    372. static inline int bitstream_decode210(BitstreamContext *bc)
    373. {
    374.     if (bitstream_read_bit(bc))
                 ^
    375.         return 0;
    376.     else

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
      143. 
      144. /* Return one bit from the buffer. */
      145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
           ^
      146. {
      147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
      148.         refill_64(bc);
      149. 
      150.     return get_val(bc, 1);
                      ^
      151. }
      152. 

libavcodec/bitstream.h:130:1: Parameter `n`
        128. }
        129. 
        130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
             ^
        131. {
        132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Assignment
        137.     bc->bits <<= n;
        138. #endif
        139.     bc->bits_left -= n;
                 ^
        140. 
        141.     return ret;

libavcodec/bitstream.h:377:20: Call
    375.         return 0;
    376.     else
    377.         return 2 - bitstream_read_bit(bc);
                            ^
    378. }
    379. 

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
      143. 
      144. /* Return one bit from the buffer. */
      145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
           ^
      146. {
      147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
      148.         refill_64(bc);
      149. 
      150.     return get_val(bc, 1);
                      ^
      151. }
      152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
        128. }
        129. 
        130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
             ^
        131. {
        132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
        128. }
        129. 
        130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
             ^
        131. {
        132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([-1, +oo] - 1):unsigned32 by call to `decode_mb` 
        137.     bc->bits <<= n;
        138. #endif
        139.     bc->bits_left -= n;
                 ^
        140. 
        141.     return ret;
