libavcodec/eac3dec.c:158: error: Integer Overflow L2
  ([0, 8388607] - 4194304):unsigned32.

libavcodec/eac3dec.c:112:1: <LHS trace>
110. }
111. 
112. void ff_eac3_decode_transform_coeffs_aht_ch(AC3DecodeContext *s, int ch)
     ^
113. {
114.     int bin, blk, gs;

libavcodec/eac3dec.c:112:1: Parameter `s->dith_state.state[*]`
110. }
111. 
112. void ff_eac3_decode_transform_coeffs_aht_ch(AC3DecodeContext *s, int ch)
     ^
113. {
114.     int bin, blk, gs;

libavcodec/eac3dec.c:158:50: Call
156.             /* zero-mantissa dithering */
157.             for (blk = 0; blk < 6; blk++) {
158.                 s->pre_mantissa[ch][bin][blk] = (av_lfg_get(&s->dith_state) & 0x7FFFFF) - 0x400000;
                                                      ^
159.             }
160.         } else if (hebap < 8) {

libavutil/lfg.h:38:1: Parameter `c->state[*]`
  36.  * it may be good enough and faster for your specific use case.
  37.  */
  38. static inline unsigned int av_lfg_get(AVLFG *c){
      ^
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];

libavutil/lfg.h:40:5: Assignment
  38. static inline unsigned int av_lfg_get(AVLFG *c){
  39.     c->state[c->index & 63] = c->state[(c->index-24) & 63] + c->state[(c->index-55) & 63];
  40.     return c->state[c->index++ & 63];
          ^
  41. }
  42. 

libavcodec/eac3dec.c:158:17: Binary operation: ([0, 8388607] - 4194304):unsigned32
156.             /* zero-mantissa dithering */
157.             for (blk = 0; blk < 6; blk++) {
158.                 s->pre_mantissa[ch][bin][blk] = (av_lfg_get(&s->dith_state) & 0x7FFFFF) - 0x400000;
                     ^
159.             }
160.         } else if (hebap < 8) {
