libavcodec/svq3.c:1219: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1219:17: Call
1217. 
1218.             if (mb_type != 0)
1219.                 ff_h264_hl_decode_mb(h);
                      ^
1220. 
1221.             if (h->pict_type != AV_PICTURE_TYPE_B && !h->low_delay)

libavcodec/h264.c:2298:1: Parameter `h->list_count`
  2296. #include "h264_mb_template.c"
  2297. 
  2298. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2299. {
  2300.     const int mb_xy   = h->mb_xy;

libavcodec/svq3.c:1219:17: Call
1217. 
1218.             if (mb_type != 0)
1219.                 ff_h264_hl_decode_mb(h);
                      ^
1220. 
1221.             if (h->pict_type != AV_PICTURE_TYPE_B && !h->low_delay)

libavcodec/h264.c:2298:1: Parameter `h->list_count`
  2296. #include "h264_mb_template.c"
  2297. 
  2298. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2299. {
  2300.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:2306:13: Call
  2304.     if (CHROMA444) {
  2305.         if (is_complex || h->pixel_shift)
  2306.             hl_decode_mb_444_complex(h);
                    ^
  2307.         else
  2308.             hl_decode_mb_444_simple_8(h);

libavcodec/h264_mb_template.c:277:1: Parameter `h->list_count`
    275. #include "h264_mc_template.c"
    276. 
    277. static av_noinline void FUNC(hl_decode_mb_444)(H264Context *h)
         ^
    278. {
    279.     const int mb_x    = h->mb_x;

libavcodec/h264_mb_template.c:360:13: Call
    358.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    359.         } else {
    360.             FUNC(hl_motion_444)(h, dest[0], dest[1], dest[2],
                     ^
    361.                       h->me.qpel_put, h->h264chroma.put_h264_chroma_pixels_tab,
    362.                       h->me.qpel_avg, h->h264chroma.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:61:1: Parameter `h->list_count`
      59. }
      60. 
      61. static void MCFUNC(hl_motion)(H264Context *h, uint8_t *dest_y,
          ^
      62.                               uint8_t *dest_cb, uint8_t *dest_cr,
      63.                               qpel_mc_func(*qpix_put)[16],

libavcodec/h264_mc_template.c:76:9: Call
      74. 
      75.     if (HAVE_THREADS && (h->avctx->active_thread_type & FF_THREAD_FRAME))
      76.         await_references(h);
                  ^
      77.     prefetch_motion(h, 0, PIXEL_SHIFT, CHROMA_IDC);
      78. 

libavcodec/h264.c:538:1: <LHS trace>
536.  * @param h the H264 context
537.  */
538. static void await_references(H264Context *h)
     ^
539. {
540.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:538:1: Parameter `h->list_count`
        536.  * @param h the H264 context
        537.  */
        538. static void await_references(H264Context *h)
             ^
        539. {
        540.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:608:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        606.     }
        607. 
        608.     for (list = h->list_count - 1; list >= 0; list--)
                      ^
        609.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        610.             int row = refs[list][ref];
