libavcodec/svq3.c:1264: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1264:17: Call
1262. 
1263.             if (mb_type != 0)
1264.                 ff_h264_hl_decode_mb(h);
                      ^
1265. 
1266.             if (h->pict_type != AV_PICTURE_TYPE_B && !h->low_delay)

libavcodec/h264.c:2601:1: Parameter `h->list_count`
  2599. #include "h264_mb_template.c"
  2600. 
  2601. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2602. {
  2603.     const int mb_xy   = h->mb_xy;

libavcodec/svq3.c:1264:17: Call
1262. 
1263.             if (mb_type != 0)
1264.                 ff_h264_hl_decode_mb(h);
                      ^
1265. 
1266.             if (h->pict_type != AV_PICTURE_TYPE_B && !h->low_delay)

libavcodec/h264.c:2601:1: Parameter `h->list_count`
  2599. #include "h264_mb_template.c"
  2600. 
  2601. void ff_h264_hl_decode_mb(H264Context *h)
        ^
  2602. {
  2603.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:2610:13: Call
  2608.     if (CHROMA444(h)) {
  2609.         if (is_complex || h->pixel_shift)
  2610.             hl_decode_mb_444_complex(h);
                    ^
  2611.         else
  2612.             hl_decode_mb_444_simple_8(h);

libavcodec/h264_mb_template.c:273:1: Parameter `h->list_count`
    271. #include "h264_mc_template.c"
    272. 
    273. static av_noinline void FUNC(hl_decode_mb_444)(H264Context *h)
         ^
    274. {
    275.     const int mb_x    = h->mb_x;

libavcodec/h264_mb_template.c:356:13: Call
    354.                                linesize, 0, 1, SIMPLE, PIXEL_SHIFT);
    355.         } else {
    356.             FUNC(hl_motion_444)(h, dest[0], dest[1], dest[2],
                     ^
    357.                       h->qpel_put, h->h264chroma.put_h264_chroma_pixels_tab,
    358.                       h->qpel_avg, h->h264chroma.avg_h264_chroma_pixels_tab,

libavcodec/h264_mc_template.c:61:1: Parameter `h->list_count`
      59. }
      60. 
      61. static void MCFUNC(hl_motion)(H264Context *h, uint8_t *dest_y,
          ^
      62.                               uint8_t *dest_cb, uint8_t *dest_cr,
      63.                               qpel_mc_func(*qpix_put)[16],

libavcodec/h264_mc_template.c:76:9: Call
      74. 
      75.     if (HAVE_THREADS && (h->avctx->active_thread_type & FF_THREAD_FRAME))
      76.         await_references(h);
                  ^
      77.     prefetch_motion(h, 0, PIXEL_SHIFT, CHROMA_IDC);
      78. 

libavcodec/h264.c:756:1: <LHS trace>
754.  * @param h the H264 context
755.  */
756. static void await_references(H264Context *h)
     ^
757. {
758.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:756:1: Parameter `h->list_count`
        754.  * @param h the H264 context
        755.  */
        756. static void await_references(H264Context *h)
             ^
        757. {
        758.     const int mb_xy   = h->mb_xy;

libavcodec/h264.c:826:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
        824.     }
        825. 
        826.     for (list = h->list_count - 1; list >= 0; list--)
                      ^
        827.         for (ref = 0; ref < 48 && nrefs[list]; ref++) {
        828.             int row = refs[list][ref];
