libavcodec/cavsdec.c:1151: error: Integer Overflow L2
  (32 - [0, 64]):unsigned32 by call to `decode_seq_header`.

libavcodec/cavsdec.c:1150:13: Call
1148.         switch (stc) {
1149.         case CAVS_START_CODE:
1150.             bitstream_init(&h->bc, buf_ptr, input_size);
                  ^
1151.             decode_seq_header(h);
1152.             break;

libavcodec/bitstream.h:85:9: Assignment
  83.         bc->buffer    =
  84.         bc->ptr       = NULL;
  85.         bc->bits_left = 0;
              ^
  86.         return AVERROR_INVALIDDATA;
  87.     }

libavcodec/cavsdec.c:1151:13: Call
1149.         case CAVS_START_CODE:
1150.             bitstream_init(&h->bc, buf_ptr, input_size);
1151.             decode_seq_header(h);
                  ^
1152.             break;
1153.         case PIC_I_START_CODE:

libavcodec/cavsdec.c:1079:1: Parameter `h->bc.bits_left`
  1077.  ****************************************************************************/
  1078. 
  1079. static int decode_seq_header(AVSContext *h)
        ^
  1080. {
  1081.     int frame_rate_code;

libavcodec/cavsdec.c:1084:18: Call
  1082.     int width, height;
  1083. 
  1084.     h->profile = bitstream_read(&h->bc, 8);
                         ^
  1085.     h->level   = bitstream_read(&h->bc, 8);
  1086.     bitstream_skip(&h->bc, 1); // progressive sequence

libavcodec/bitstream.h:183:1: Parameter `n`
    181. 
    182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    184. {
    185.     if (!n)

libavcodec/bitstream.h:189:9: Call
    187. 
    188.     if (n > bc->bits_left) {
    189.         refill_32(bc);
                 ^
    190.         if (bc->bits_left < 32)
    191.             bc->bits_left = n;

libavcodec/bitstream.h:60:1: <RHS trace>
58. }
59. 
60. static inline void refill_32(BitstreamContext *bc)
    ^
61. {
62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:60:1: Parameter `bc->bits_left`
      58. }
      59. 
      60. static inline void refill_32(BitstreamContext *bc)
          ^
      61. {
      62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:68:5: Binary operation: (32 - [0, 64]):unsigned32 by call to `decode_seq_header` 
      66.     bc->bits       = (uint64_t)AV_RL32(bc->ptr) << bc->bits_left | bc->bits;
      67. #else
      68.     bc->bits       = bc->bits | (uint64_t)AV_RB32(bc->ptr) << (32 - bc->bits_left);
              ^
      69. #endif
      70.     bc->ptr       += 4;
