libavcodec/clearvideo.c:315: error: Integer Overflow L2
  ([0, +oo] - [1, 2]):unsigned32 by call to `decode_mb`.

libavcodec/clearvideo.c:295:25: Assignment
293. 
294.     c->pic->key_frame = frame_type & 0x20 ? 1 : 0;
295.     c->pic->pict_type = frame_type & 0x20 ? AV_PICTURE_TYPE_I
                             ^
296.                                           : AV_PICTURE_TYPE_P;
297. 

libavcodec/clearvideo.c:295:5: Assignment
293. 
294.     c->pic->key_frame = frame_type & 0x20 ? 1 : 0;
295.     c->pic->pict_type = frame_type & 0x20 ? AV_PICTURE_TYPE_I
         ^
296.                                           : AV_PICTURE_TYPE_P;
297. 

libavcodec/clearvideo.c:315:24: Call
313.         for (j = 0; j < c->mb_height; j++) {
314.             for (i = 0; i < c->mb_width; i++) {
315.                 ret |= decode_mb(c, i, j);
                            ^
316.             }
317.         }

libavcodec/clearvideo.c:227:1: Parameter `(*c->ac_vlc.table)[*]`
  225. }
  226. 
  227. static int decode_mb(CLVContext *c, int x, int y)
       ^
  228. {
  229.     int i, has_ac[6], off;

libavcodec/clearvideo.c:236:13: Call
  234.     off = x * 16 + y * 16 * c->pic->linesize[0];
  235.     for (i = 0; i < 4; i++) {
  236.         if (decode_block(c, c->block, has_ac[i], c->ac_quant) < 0)
                   ^
  237.             return AVERROR_INVALIDDATA;
  238.         if (!x && !(i & 1)) {

libavcodec/clearvideo.c:135:1: Parameter `(*ctx->ac_vlc.table)[*]`
    133. } CLVContext;
    134. 
    135. static inline int decode_block(CLVContext *ctx, int16_t *blk, int has_ac,
         ^
    136.                                int ac_quant)
    137. {

libavcodec/clearvideo.c:151:15: Call
    149. 
    150.     while (idx < 64 && !last) {
    151.         val = bitstream_read_vlc(bc, ctx->ac_vlc.table, 9, 2);
                       ^
    152.         if (val < 0)
    153.             return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:313:1: Parameter `(*table)[*]`
      311.  * If the VLC code is invalid and max_depth > 1, then the number of bits removed
      312.  * is undefined. */
      313. static inline int bitstream_read_vlc(BitstreamContext *bc, VLC_TYPE (*table)[2],
           ^
      314.                                      int bits, int max_depth)
      315. {

libavcodec/bitstream.h:319:5: Assignment
      317.     unsigned idx = bitstream_peek(bc, bits);
      318.     int code = table[idx][0];
      319.     int n    = table[idx][1];
               ^
      320. 
      321.     if (max_depth > 1 && n < 0) {

libavcodec/bitstream.h:329:5: Call
      327.         }
      328.     }
      329.     skip_remaining(bc, n);
               ^
      330. 
      331.     return code;

libavcodec/bitstream.h:230:1: <LHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `bc->bits_left`
        228. }
        229. 
        230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
             ^
        231. {
        232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: <RHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `n`
        228. }
        229. 
        230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
             ^
        231. {
        232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Binary operation: ([0, +oo] - [1, 2]):unsigned32 by call to `decode_mb` 
        235.     bc->bits <<= n;
        236. #endif
        237.     bc->bits_left -= n;
                 ^
        238. }
        239. 
