libavcodec/h264dec.c:761: error: Integer Overflow L2
  ([0, 4294967295] × 8):signed32 by call to `ff_h264_field_end`.

libavcodec/h264dec.c:742:17: Call
740.     }
741. 
742.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
743.     if (buf_index < 0)
744.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:528:11: Call
  526.     }
  527. 
  528.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  529.                                 h->nal_length_size, avctx->codec_id);
  530.     if (ret < 0) {

libavcodec/h2645_parse.c:301:15: Call
    299.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    300. 
    301.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    302.         if (ret < 0)
    303.             return ret;

libavcodec/get_bits.h:362:1: Parameter `bit_size`
      360.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      361.  */
      362. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      363.                                 int bit_size)
      364. {

libavcodec/get_bits.h:379:5: Assignment
      377.     s->size_in_bits       = bit_size;
      378. #if !UNCHECKED_BITSTREAM_READER
      379.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      380. #endif
      381.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264dec.c:761:13: Call
759.         (h->mb_y >= h->mb_height && h->mb_height)) {
760.         if (h->field_started)
761.             ff_h264_field_end(h, &h->slice_ctx[0], 0);
                 ^
762. 
763.         *got_frame = 0;

libavcodec/h264_picture.c:145:1: Parameter `sl->er.mb_width`
  143. #endif /* CONFIG_ERROR_RESILIENCE */
  144. 
  145. int ff_h264_field_end(H264Context *h, H264SliceContext *sl, int in_setup)
       ^
  146. {
  147.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_picture.c:190:9: Call
  188.         h264_set_erpic(&sl->er.next_pic,
  189.                        sl->ref_count[1] ? sl->ref_list[1][0].parent : NULL);
  190.         ff_er_frame_end(&sl->er);
               ^
  191.     }
  192. #endif /* CONFIG_ERROR_RESILIENCE */

libavcodec/error_resilience.c:1023:14: Assignment
    1021.     /* handle inter blocks with damaged AC */
    1022.     for (mb_y = 0; mb_y < s->mb_height; mb_y++) {
    1023.         for (mb_x = 0; mb_x < s->mb_width; mb_x++) {
                       ^
    1024.             const int mb_xy   = mb_x + mb_y * s->mb_stride;
    1025.             const int mb_type = s->cur_pic.mb_type[mb_xy];

libavcodec/error_resilience.c:1197:9: Call
    1195. 
    1196.         /* filter vertical block boundaries */
    1197.         v_block_filter(s, s->cur_pic.f->data[0], s->mb_width * 2,
                  ^
    1198.                        s->mb_height * 2, linesize[0], 1);
    1199.         v_block_filter(s, s->cur_pic.f->data[1], s->mb_width,

libavcodec/error_resilience.c:291:1: <LHS trace>
289.  * @param h     height in 8 pixel blocks
290.  */
291. static void v_block_filter(ERContext *s, uint8_t *dst, int w, int h,
     ^
292.                            ptrdiff_t stride, int is_luma)
293. {

libavcodec/error_resilience.c:291:1: Parameter `w`
      289.  * @param h     height in 8 pixel blocks
      290.  */
      291. static void v_block_filter(ERContext *s, uint8_t *dst, int w, int h,
           ^
      292.                            ptrdiff_t stride, int is_luma)
      293. {

libavcodec/error_resilience.c:310:13: Binary operation: ([0, 4294967295] × 8):signed32 by call to `ff_h264_field_end` 
      308.             int top_damage    = top_status & ER_MB_ERROR;
      309.             int bottom_damage = bottom_status & ER_MB_ERROR;
      310.             int offset        = b_x * 8 + b_y * stride * 8;
                       ^
      311. 
      312.             int16_t *top_mv    = s->cur_pic.motion_val[0][mvy_stride *  b_y      + mvx_stride * b_x];
