libavformat/idroqdec.c:202: error: Integer Overflow L2
  ([-oo, 2147483655] + 8):signed32 by call to `av_new_packet`.

libavformat/idroqdec.c:117:9: Assignment
115. 
116.         chunk_type = AV_RL16(&preamble[0]);
117.         chunk_size = AV_RL32(&preamble[2]);
             ^
118.         if(chunk_size > INT_MAX)
119.             return AVERROR_INVALIDDATA;

libavformat/idroqdec.c:202:17: Call
200. 
201.             /* load up the packet */
202.             if (av_new_packet(pkt, chunk_size + RoQ_CHUNK_PREAMBLE_SIZE))
                     ^
203.                 return AVERROR(EIO);
204.             /* copy over preamble */

libavcodec/avpacket.c:81:1: Parameter `size`
  79. }
  80. 
  81. int av_new_packet(AVPacket *pkt, int size)
      ^
  82. {
  83.     AVBufferRef *buf = NULL;

libavcodec/avpacket.c:84:15: Call
  82. {
  83.     AVBufferRef *buf = NULL;
  84.     int ret = packet_alloc(&buf, size);
                    ^
  85.     if (ret < 0)
  86.         return ret;

libavcodec/avpacket.c:66:1: <LHS trace>
64. }
65. 
66. static int packet_alloc(AVBufferRef **buf, int size)
    ^
67. {
68.     int ret;

libavcodec/avpacket.c:66:1: Parameter `size`
    64. }
    65. 
    66. static int packet_alloc(AVBufferRef **buf, int size)
        ^
    67. {
    68.     int ret;

libavcodec/avpacket.c:72:11: Binary operation: ([-oo, 2147483655] + 8):signed32 by call to `av_new_packet` 
    70.         return AVERROR(EINVAL);
    71. 
    72.     ret = av_buffer_realloc(buf, size + FF_INPUT_BUFFER_PADDING_SIZE);
                  ^
    73.     if (ret < 0)
    74.         return ret;
