libavcodec/vp3.c:2124: error: Integer Overflow L2
  ([1, 2147483616] + 32):signed32 by call to `av_frame_ref`.

libavcodec/vp3.c:2114:9: Call
2112.     s->last_slice_end = 0;
2113.     for (i = 0; i < s->c_superblock_height; i++)
2114.         render_slice(s, i);
              ^
2115. 
2116.     // filter the last row

libavcodec/vp3.c:1469:1: Parameter `s->qmat[*][*][*][*]`
  1467.  * The slice number ranges from 0..(c_superblock_height - 1).
  1468.  */
  1469. static void render_slice(Vp3DecodeContext *s, int slice)
        ^
  1470. {
  1471.     int x, y, i, j, fragment;

libavcodec/vp3.c:2124:16: Call
2122. 
2123.     /* output frame, offset as needed */
2124.     if ((ret = av_frame_ref(data, s->current_frame.f)) < 0)
                     ^
2125.         return ret;
2126. 

libavutil/frame.c:199:1: Parameter `src->nb_samples`
  197. }
  198. 
  199. int av_frame_ref(AVFrame *dst, const AVFrame *src)
       ^
  200. {
  201.     int i, ret = 0;

libavutil/frame.c:207:5: Assignment
  205.     dst->height         = src->height;
  206.     dst->channel_layout = src->channel_layout;
  207.     dst->nb_samples     = src->nb_samples;
           ^
  208. 
  209.     ret = av_frame_copy_props(dst, src);

libavutil/frame.c:215:15: Call
  213.     /* duplicate the frame data if it's not refcounted */
  214.     if (!src->buf[0]) {
  215.         ret = av_frame_get_buffer(dst, 32);
                     ^
  216.         if (ret < 0)
  217.             return ret;

libavutil/frame.c:186:1: Parameter `frame->nb_samples`
    184. }
    185. 
    186. int av_frame_get_buffer(AVFrame *frame, int align)
         ^
    187. {
    188.     if (frame->format < 0)

libavutil/frame.c:194:16: Call
    192.         return get_video_buffer(frame, align);
    193.     else if (frame->nb_samples > 0 && frame->channel_layout)
    194.         return get_audio_buffer(frame, align);
                        ^
    195. 
    196.     return AVERROR(EINVAL);

libavutil/frame.c:137:1: Parameter `frame->nb_samples`
      135. }
      136. 
      137. static int get_audio_buffer(AVFrame *frame, int align)
           ^
      138. {
      139.     int channels = av_get_channel_layout_nb_channels(frame->channel_layout);

libavutil/frame.c:145:15: Call
      143. 
      144.     if (!frame->linesize[0]) {
      145.         ret = av_samples_get_buffer_size(&frame->linesize[0], channels,
                         ^
      146.                                          frame->nb_samples, frame->format,
      147.                                          align);

libavutil/samplefmt.c:108:1: <LHS trace>
106. }
107. 
108. int av_samples_get_buffer_size(int *linesize, int nb_channels, int nb_samples,
     ^
109.                                enum AVSampleFormat sample_fmt, int align)
110. {

libavutil/samplefmt.c:108:1: Parameter `nb_samples`
        106. }
        107. 
        108. int av_samples_get_buffer_size(int *linesize, int nb_channels, int nb_samples,
             ^
        109.                                enum AVSampleFormat sample_fmt, int align)
        110. {

libavutil/samplefmt.c:124:9: Binary operation: ([1, 2147483616] + 32):signed32 by call to `av_frame_ref` 
        122.             return AVERROR(EINVAL);
        123.         align = 1;
        124.         nb_samples = FFALIGN(nb_samples, 32);
                     ^
        125.     }
        126. 
