libavcodec/svq3.c:1055: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1055:17: Call
1053. 
1054.             if (mb_type != 0) {
1055.                 ff_h264_hl_decode_mb (h);
                      ^
1056.             }
1057. 

libavcodec/h264.c:2172:1: Parameter `h->list_count`
  2170. }
  2171. 
  2172. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  2173.     MpegEncContext * const s = &h->s;
  2174.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2180:13: Call
  2178.     if (CHROMA444) {
  2179.         if(is_complex || h->pixel_shift)
  2180.             hl_decode_mb_444_complex(h);
                    ^
  2181.         else
  2182.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2164:1: Parameter `h->list_count`
    2162. }
    2163. 
    2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
          ^
    2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
    2166. }

libavcodec/h264.c:2165:5: Call
    2163. 
    2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
    2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2166. }
    2167. 

libavcodec/h264.c:2051:1: Parameter `h->list_count`
      2049. }
      2050. 
      2051. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
            ^
      2052.     MpegEncContext * const s = &h->s;
      2053.     const int mb_x= s->mb_x;

libavcodec/svq3.c:1055:17: Call
1053. 
1054.             if (mb_type != 0) {
1055.                 ff_h264_hl_decode_mb (h);
                      ^
1056.             }
1057. 

libavcodec/h264.c:2172:1: Parameter `h->list_count`
  2170. }
  2171. 
  2172. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  2173.     MpegEncContext * const s = &h->s;
  2174.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2180:13: Call
  2178.     if (CHROMA444) {
  2179.         if(is_complex || h->pixel_shift)
  2180.             hl_decode_mb_444_complex(h);
                    ^
  2181.         else
  2182.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2164:1: Parameter `h->list_count`
    2162. }
    2163. 
    2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
          ^
    2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
    2166. }

libavcodec/h264.c:2165:5: Call
    2163. 
    2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
    2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2166. }
    2167. 

libavcodec/h264.c:2051:1: Parameter `h->list_count`
      2049. }
      2050. 
      2051. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
            ^
      2052.     MpegEncContext * const s = &h->s;
      2053.     const int mb_x= s->mb_x;

libavcodec/h264.c:2130:13: Call
      2128.                 xchg_mb_border(h, dest[0], dest[1], dest[2], linesize, linesize, 0, 1, simple, pixel_shift);
      2129.         }else{
      2130.             hl_motion(h, dest[0], dest[1], dest[2],
                        ^
      2131.                       s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
      2132.                       s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:715:1: Parameter `h->list_count`
        713. }
        714. 
        715. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
             ^
        716.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
        717.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:728:9: Call
        726. 
        727.     if(HAVE_THREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
        728.         await_references(h);
                     ^
        729.     prefetch_motion(h, 0, pixel_shift, chroma_idc);
        730. 

libavcodec/h264.c:290:1: <LHS trace>
288.  * @param h the H264 context
289.  */
290. static void await_references(H264Context *h){
     ^
291.     MpegEncContext * const s = &h->s;
292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:290:1: Parameter `h->list_count`
          288.  * @param h the H264 context
          289.  */
          290. static void await_references(H264Context *h){
               ^
          291.     MpegEncContext * const s = &h->s;
          292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:348:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
          346.     }
          347. 
          348.     for(list=h->list_count-1; list>=0; list--){
                       ^
          349.         for(ref=0; ref<48 && nrefs[list]; ref++){
          350.             int row = refs[list][ref];
