libavcodec/qtrle.c:219: error: Integer Overflow L2
  ([0, `*s->g.buffer`] - 1):unsigned32.

libavcodec/qtrle.c:209:1: <LHS trace>
207. }
208. 
209. static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
210. {
211.     int rle_code;

libavcodec/qtrle.c:209:1: Parameter `*s->g.buffer`
207. }
208. 
209. static void qtrle_decode_16bpp(QtrleContext *s, int row_ptr, int lines_to_change)
     ^
210. {
211.     int rle_code;

libavcodec/qtrle.c:219:32: Call
217. 
218.     while (lines_to_change--) {
219.         pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 2;
                                    ^
220. 
221.         while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {

libavcodec/bytestream.h:96:1: Assignment
  94. DEF  (be24, 3, AV_RB24, AV_WB24)
  95. DEF  (be16, 2, AV_RB16, AV_WB16)
  96. DEF  (byte, 1, AV_RB8 , AV_WB8 )
      ^
  97. 
  98. #undef DEF

libavcodec/qtrle.c:219:9: Binary operation: ([0, *s->g.buffer] - 1):unsigned32
217. 
218.     while (lines_to_change--) {
219.         pixel_ptr = row_ptr + (bytestream2_get_byte(&s->g) - 1) * 2;
             ^
220. 
221.         while ((rle_code = (signed char)bytestream2_get_byte(&s->g)) != -1) {
