libavcodec/g2meet.c:268: error: Integer Overflow L2
  ([0, +oo] - [1, 15]):unsigned32 by call to `bitstream_read_xbits`.

libavcodec/g2meet.c:239:1: Parameter `(*c->ac_vlc[*].table)[*]`
237. }
238. 
239. static int jpg_decode_block(JPGContext *c, BitstreamContext *bc,
     ^
240.                             int plane, int16_t *block)
241. {

libavcodec/g2meet.c:258:15: Call
256.     pos = 0;
257.     while (pos < 63) {
258.         val = bitstream_read_vlc(bc, c->ac_vlc[is_chroma].table, 9, 3);
                   ^
259.         if (val < 0)
260.             return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:313:1: Parameter `(*table)[*]`
  311.  * If the VLC code is invalid and max_depth > 1, then the number of bits removed
  312.  * is undefined. */
  313. static inline int bitstream_read_vlc(BitstreamContext *bc, VLC_TYPE (*table)[2],
       ^
  314.                                      int bits, int max_depth)
  315. {

libavcodec/bitstream.h:319:5: Assignment
  317.     unsigned idx = bitstream_peek(bc, bits);
  318.     int code = table[idx][0];
  319.     int n    = table[idx][1];
           ^
  320. 
  321.     if (max_depth > 1 && n < 0) {

libavcodec/bitstream.h:329:5: Call
  327.         }
  328.     }
  329.     skip_remaining(bc, n);
           ^
  330. 
  331.     return code;

libavcodec/bitstream.h:230:1: Parameter `n`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Assignment
    235.     bc->bits <<= n;
    236. #endif
    237.     bc->bits_left -= n;
             ^
    238. }
    239. 

libavcodec/g2meet.c:268:51: Call
266.             int nbits = val;
267. 
268.             val                                 = bitstream_read_xbits(bc, nbits);
                                                       ^
269.             val                                *= qmat[ff_zigzag_direct[pos]];
270.             block[c->scantable.permutated[pos]] = val;

libavcodec/bitstream.h:281:1: Parameter `length`
  279. /* Read MPEG-1 dc-style VLC (sign bit + mantissa with no MSB).
  280.  * If MSB not set it is negative. */
  281. static inline int bitstream_read_xbits(BitstreamContext *bc, unsigned length)
       ^
  282. {
  283.     int32_t cache = bitstream_peek(bc, 32);

libavcodec/bitstream.h:285:5: Call
  283.     int32_t cache = bitstream_peek(bc, 32);
  284.     int sign = ~cache >> 31;
  285.     skip_remaining(bc, length);
           ^
  286. 
  287.     return ((((uint32_t)(sign ^ cache)) >> (32 - length)) ^ sign) - sign;

libavcodec/bitstream.h:230:1: <LHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `bc->bits_left`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: <RHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `n`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Binary operation: ([0, +oo] - [1, 15]):unsigned32 by call to `bitstream_read_xbits` 
    235.     bc->bits <<= n;
    236. #endif
    237.     bc->bits_left -= n;
             ^
    238. }
    239. 
