libavcodec/cbs_h264_syntax_template.c:94: error: Integer Overflow L2
  (32 - [0, max(63, `rw->bits_left`)]):unsigned32 by call to `ff_cbs_read_unsigned`.

libavcodec/cbs_h264_syntax_template.c:88:1: Parameter `rw->bits_left`
86. }
87. 
88. static int FUNC(hrd_parameters)(CodedBitstreamContext *ctx, RWContext *rw,
    ^
89.                                 H264RawHRD *current)
90. {

libavcodec/cbs_h264_syntax_template.c:93:5: Call
91.     int err, i;
92. 
93.     ue(cpb_cnt_minus1, 0, 31);
        ^
94.     u(4, bit_rate_scale, 0, 15);
95.     u(4, cpb_size_scale, 0, 15);

libavcodec/cbs_h2645.c:34:1: Parameter `bc->bits_left`
  32. 
  33. 
  34. static int cbs_read_ue_golomb(CodedBitstreamContext *ctx, BitstreamContext *bc,
      ^
  35.                               const char *name, uint32_t *write_to,
  36.                               uint32_t range_min, uint32_t range_max)

libavcodec/cbs_h264_syntax_template.c:94:5: Call
92. 
93.     ue(cpb_cnt_minus1, 0, 31);
94.     u(4, bit_rate_scale, 0, 15);
        ^
95.     u(4, cpb_size_scale, 0, 15);
96. 

libavcodec/cbs.c:307:1: Parameter `bc->bits_left`
  305. }
  306. 
  307. int ff_cbs_read_unsigned(CodedBitstreamContext *ctx, BitstreamContext *bc,
       ^
  308.                          int width, const char *name, uint32_t *write_to,
  309.                          uint32_t range_min, uint32_t range_max)

libavcodec/cbs.c:325:13: Call
  323.         position = bitstream_tell(bc);
  324. 
  325.     value = bitstream_read(bc, width);
                   ^
  326. 
  327.     if (ctx->trace_enable) {

libavcodec/bitstream.h:182:1: Parameter `n`
    180. 
    181. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    182. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    183. {
    184.     if (!n)

libavcodec/bitstream.h:188:9: Call
    186. 
    187.     if (n > bc->bits_left) {
    188.         refill_32(bc);
                 ^
    189.         if (bc->bits_left < 32)
    190.             bc->bits_left = n;

libavcodec/bitstream.h:59:1: <RHS trace>
57. }
58. 
59. static inline void refill_32(BitstreamContext *bc)
    ^
60. {
61.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:59:1: Parameter `bc->bits_left`
      57. }
      58. 
      59. static inline void refill_32(BitstreamContext *bc)
          ^
      60. {
      61.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:67:5: Binary operation: (32 - [0, max(63, rw->bits_left)]):unsigned32 by call to `ff_cbs_read_unsigned` 
      65.     bc->bits       = (uint64_t)AV_RL32(bc->ptr) << bc->bits_left | bc->bits;
      66. #else
      67.     bc->bits       = bc->bits | (uint64_t)AV_RB32(bc->ptr) << (32 - bc->bits_left);
              ^
      68. #endif
      69.     bc->ptr       += 4;
