libavcodec/g2meet.c:328: error: Integer Overflow L2
  ([0, +oo] - 9):unsigned32 by call to `jpg_decode_block`.

libavcodec/g2meet.c:301:5: Call
299.     jpg_unescape(src, src_size, c->buf, &unesc_size);
300.     memset(c->buf + unesc_size, 0, AV_INPUT_BUFFER_PADDING_SIZE);
301.     bitstream_init(&bc, c->buf, unesc_size * 8);
         ^
302. 
303.     width = FFALIGN(width, 16);

libavcodec/bitstream.h:85:9: Assignment
  83.         bc->buffer    =
  84.         bc->ptr       = NULL;
  85.         bc->bits_left = 0;
              ^
  86.         return AVERROR_INVALIDDATA;
  87.     }

libavcodec/g2meet.c:328:32: Call
326.                         continue;
327.                     num_mbs--;
328.                     if ((ret = jpg_decode_block(c, &bc, 0,
                                    ^
329.                                                 c->block[i + j * 2])) != 0)
330.                         return ret;

libavcodec/g2meet.c:239:1: Parameter `bc->bits_left`
  237. }
  238. 
  239. static int jpg_decode_block(JPGContext *c, BitstreamContext *bc,
       ^
  240.                             int plane, int16_t *block)
  241. {

libavcodec/g2meet.c:247:10: Call
  245. 
  246.     c->bdsp.clear_block(block);
  247.     dc = bitstream_read_vlc(bc, c->dc_vlc[is_chroma].table, 9, 3);
                ^
  248.     if (dc < 0)
  249.         return AVERROR_INVALIDDATA;

libavcodec/bitstream.h:313:1: Parameter `bits`
    311.  * If the VLC code is invalid and max_depth > 1, then the number of bits removed
    312.  * is undefined. */
    313. static inline int bitstream_read_vlc(BitstreamContext *bc, VLC_TYPE (*table)[2],
         ^
    314.                                      int bits, int max_depth)
    315. {

libavcodec/bitstream.h:322:9: Call
    320. 
    321.     if (max_depth > 1 && n < 0) {
    322.         skip_remaining(bc, bits);
                 ^
    323.         code = set_idx(bc, code, &n, &nb_bits, table);
    324.         if (max_depth > 2 && n < 0) {

libavcodec/bitstream.h:230:1: <LHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `bc->bits_left`
      228. }
      229. 
      230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
           ^
      231. {
      232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: <RHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `n`
      228. }
      229. 
      230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
           ^
      231. {
      232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Binary operation: ([0, +oo] - 9):unsigned32 by call to `jpg_decode_block` 
      235.     bc->bits <<= n;
      236. #endif
      237.     bc->bits_left -= n;
               ^
      238. }
      239. 
