libavcodec/cavsdec.c:1005: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `bitstream_skip`.

libavcodec/cavsdec.c:980:18: Call
978. 
979.     ff_cavs_init_pic(h);
980.     h->cur.poc = bitstream_read(&h->bc, 8) * 2;
                      ^
981. 
982.     /* get temporal distances and MV scaling factors */

libavcodec/bitstream.h:182:1: Parameter `bc->bits_left`
  180. 
  181. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  182. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  183. {
  184.     if (!n)

libavcodec/cavsdec.c:1000:24: Call
 998.     if (h->low_delay)
 999.         get_ue_golomb(&h->bc); // bbv_check_times
1000.     h->progressive   = bitstream_read_bit(&h->bc);
                             ^
1001.     h->pic_structure = 1;
1002.     if (!h->progressive)

libavcodec/bitstream.h:144:1: Parameter `bc->bits_left`
  142. 
  143. /* Return one bit from the buffer. */
  144. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
       ^
  145. {
  146.     if (!bc->bits_left)

libavcodec/bitstream.h:149:12: Call
  147.         refill_64(bc);
  148. 
  149.     return get_val(bc, 1);
                  ^
  150. }
  151. 

libavcodec/bitstream.h:129:1: Parameter `n`
    127. }
    128. 
    129. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
         ^
    130. {
    131. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:138:5: Assignment
    136.     bc->bits <<= n;
    137. #endif
    138.     bc->bits_left -= n;
             ^
    139. 
    140.     return ret;

libavcodec/cavsdec.c:1005:9: Call
1003.         h->pic_structure = bitstream_read_bit(&h->bc);
1004.     if (!h->pic_structure && h->stc == PIC_PB_START_CODE)
1005.         bitstream_skip(&h->bc, 1);  // advanced_pred_mode_disable
              ^
1006.     bitstream_skip(&h->bc, 1);      // top_field_first
1007.     bitstream_skip(&h->bc, 1);      // repeat_first_field

libavcodec/bitstream.h:240:1: Parameter `n`
  238. 
  239. /* Skip n bits in the buffer. */
  240. static inline void bitstream_skip(BitstreamContext *bc, unsigned n)
       ^
  241. {
  242.     if (n < bc->bits_left)

libavcodec/bitstream.h:243:9: Call
  241. {
  242.     if (n < bc->bits_left)
  243.         skip_remaining(bc, n);
               ^
  244.     else {
  245.         n -= bc->bits_left;

libavcodec/bitstream.h:229:1: <LHS trace>
227. }
228. 
229. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
230. {
231. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:229:1: Parameter `bc->bits_left`
    227. }
    228. 
    229. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    230. {
    231. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:229:1: <RHS trace>
227. }
228. 
229. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
230. {
231. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:229:1: Parameter `n`
    227. }
    228. 
    229. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    230. {
    231. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:236:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `bitstream_skip` 
    234.     bc->bits <<= n;
    235. #endif
    236.     bc->bits_left -= n;
             ^
    237. }
    238. 
