libavformat/apetag.c:108: error: Integer Overflow L2
  ([32, +oo] - [-oo, 16777248]):unsigned32.

libavformat/apetag.c:69:21: <LHS trace>
67. {
68.     ByteIOContext *pb = s->pb;
69.     int file_size = url_fsize(pb);
                        ^
70.     uint32_t val, fields, tag_bytes;
71.     uint8_t buf[8];

libavformat/apetag.c:69:21: Call
67. {
68.     ByteIOContext *pb = s->pb;
69.     int file_size = url_fsize(pb);
                        ^
70.     uint32_t val, fields, tag_bytes;
71.     uint8_t buf[8];

libavformat/aviobuf.c:210:9: Assignment
  208. 
  209.     if(!s)
  210.         return AVERROR(EINVAL);
               ^
  211. 
  212.     if (!s->seek)

libavformat/apetag.c:69:5: Assignment
67. {
68.     ByteIOContext *pb = s->pb;
69.     int file_size = url_fsize(pb);
        ^
70.     uint32_t val, fields, tag_bytes;
71.     uint8_t buf[8];

libavformat/apetag.c:90:17: <RHS trace>
88.     }
89. 
90.     tag_bytes = get_le32(pb);  /* tag size */
                    ^
91.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
92.         av_log(s, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/apetag.c:90:17: Call
88.     }
89. 
90.     tag_bytes = get_le32(pb);  /* tag size */
                    ^
91.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
92.         av_log(s, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/aviobuf.c:498:11: Call
  496. {
  497.     unsigned int val;
  498.     val = get_le16(s);
                 ^
  499.     val |= get_le16(s) << 16;
  500.     return val;

libavformat/aviobuf.c:482:11: Call
    480. {
    481.     unsigned int val;
    482.     val = get_byte(s);
                   ^
    483.     val |= get_byte(s) << 8;
    484.     return val;

libavformat/aviobuf.c:397:5: Assignment
      395.     if (s->buf_ptr < s->buf_end)
      396.         return *s->buf_ptr++;
      397.     return 0;
               ^
      398. }
      399. 

libavformat/aviobuf.c:482:5: Assignment
    480. {
    481.     unsigned int val;
    482.     val = get_byte(s);
             ^
    483.     val |= get_byte(s) << 8;
    484.     return val;

libavformat/aviobuf.c:483:5: Assignment
    481.     unsigned int val;
    482.     val = get_byte(s);
    483.     val |= get_byte(s) << 8;
             ^
    484.     return val;
    485. }

libavformat/aviobuf.c:484:5: Assignment
    482.     val = get_byte(s);
    483.     val |= get_byte(s) << 8;
    484.     return val;
             ^
    485. }
    486. 

libavformat/aviobuf.c:498:5: Assignment
  496. {
  497.     unsigned int val;
  498.     val = get_le16(s);
           ^
  499.     val |= get_le16(s) << 16;
  500.     return val;

libavformat/aviobuf.c:499:5: Assignment
  497.     unsigned int val;
  498.     val = get_le16(s);
  499.     val |= get_le16(s) << 16;
           ^
  500.     return val;
  501. }

libavformat/aviobuf.c:500:5: Assignment
  498.     val = get_le16(s);
  499.     val |= get_le16(s) << 16;
  500.     return val;
           ^
  501. }
  502. 

libavformat/apetag.c:90:5: Assignment
88.     }
89. 
90.     tag_bytes = get_le32(pb);  /* tag size */
        ^
91.     if (tag_bytes - APE_TAG_FOOTER_BYTES > (1024 * 1024 * 16)) {
92.         av_log(s, AV_LOG_ERROR, "Tag size is way too big\n");

libavformat/apetag.c:108:5: Binary operation: ([32, +oo] - [-oo, 16777248]):unsigned32
106.     }
107. 
108.     url_fseek(pb, file_size - tag_bytes, SEEK_SET);
         ^
109. 
110.     for (i=0; i<fields; i++)
