libavcodec/h264.c:4131: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/h264.c:4126:23: Call
4124.         for (;;) {
4125.             // START_TIMER
4126.             int ret = ff_h264_decode_mb_cabac(h);
                            ^
4127.             int eos;
4128.             // STOP_TIMER("decode_mb_cabac")

libavcodec/h264_cabac.c:1876:1: Parameter `(*h->cur_pic.qscale_table).*.strlen`
  1874.  * @return 0 if OK, ER_AC_ERROR / ER_DC_ERROR / ER_MV_ERROR if an error is noticed
  1875.  */
  1876. int ff_h264_decode_mb_cabac(H264Context *h) {
        ^
  1877.     int mb_xy;
  1878.     int mb_type, partition_count, cbp = 0;

libavcodec/h264.c:4131:17: Call
4129. 
4130.             if (ret >= 0)
4131.                 ff_h264_hl_decode_mb(h);
                      ^
4132. 
4133.             // FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264.c:2437:1: Parameter `h->list_count`
  2435. #include "h264_mb_template.c"
  2436. 
  2437. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2438. {
  2439.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:2445:13: Call
  2443.     if (CHROMA444) {
  2444.         if (is_complex || h->pixel_shift)
  2445.             hl_decode_mb_444_complex(h);
                    ^
  2446.         else
  2447.             hl_decode_mb_444_simple_8(h);

libavcodec/h264_mb_template.c:277:1: Parameter `h->list_count`
    275. #include "h264_mc_template.c"
    276. 
    277. static av_noinline void FUNC(hl_decode_mb_444)(H264Context *h)
         ^
    278. {
    279.     const int mb_x    = h->mb_x;

libavcodec/h264_mb_template.c:360:13: Call
    358.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    359.         } else {
    360.             FUNC(hl_motion_444)(h, dest[0], dest[1], dest[2],
                     ^
    361.                       h->me.qpel_put, h->h264chroma.put_h264_chroma_pixels_tab,
    362.                       h->me.qpel_avg, h->h264chroma.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:61:1: Parameter `h->list_count`
      59. }
      60. 
      61. static void MCFUNC(hl_motion)(H264Context *h, uint8_t *dest_y,
          ^
      62.                               uint8_t *dest_cb, uint8_t *dest_cr,
      63.                               qpel_mc_func(*qpix_put)[16],

libavcodec/h264_mc_template.c:76:9: Call
      74. 
      75.     if (HAVE_THREADS && (h->avctx->active_thread_type & FF_THREAD_FRAME))
      76.         await_references(h);
                  ^
      77.     prefetch_motion(h, 0, PIXEL_SHIFT, CHROMA_IDC);
      78. 

libavcodec/h264.c:671:1: <LHS trace>
669.  * @param h the H264 context
670.  */
671. static void await_references(H264Context *h)
     ^
672. {
673.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:671:1: Parameter `h->list_count`
        669.  * @param h the H264 context
        670.  */
        671. static void await_references(H264Context *h)
             ^
        672. {
        673.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:741:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        739.     }
        740. 
        741.     for (list = h->list_count - 1; list >= 0; list--)
                      ^
        742.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        743.             int row = refs[list][ref];
