libavcodec/vp3.c:2123: error: Integer Overflow L2
  ([1, 2147483616] + 32):signed32 by call to `av_frame_ref`.

libavcodec/vp3.c:2113:9: Call
2111.     s->last_slice_end = 0;
2112.     for (i = 0; i < s->c_superblock_height; i++)
2113.         render_slice(s, i);
              ^
2114. 
2115.     // filter the last row

libavcodec/vp3.c:1469:1: Parameter `s->qmat[*][*][*][*]`
  1467.  * The slice number ranges from 0..(c_superblock_height - 1).
  1468.  */
  1469. static void render_slice(Vp3DecodeContext *s, int slice)
        ^
  1470. {
  1471.     int x, y, i, j, fragment;

libavcodec/vp3.c:2123:16: Call
2121. 
2122.     /* output frame, offset as needed */
2123.     if ((ret = av_frame_ref(data, s->current_frame.f)) < 0)
                     ^
2124.         return ret;
2125.     for (i = 0; i < 3; i++) {

libavutil/frame.c:200:1: Parameter `src->nb_samples`
  198. }
  199. 
  200. int av_frame_ref(AVFrame *dst, const AVFrame *src)
       ^
  201. {
  202.     int i, ret = 0;

libavutil/frame.c:208:5: Assignment
  206.     dst->height         = src->height;
  207.     dst->channel_layout = src->channel_layout;
  208.     dst->nb_samples     = src->nb_samples;
           ^
  209. 
  210.     ret = av_frame_copy_props(dst, src);

libavutil/frame.c:216:15: Call
  214.     /* duplicate the frame data if it's not refcounted */
  215.     if (!src->buf[0]) {
  216.         ret = av_frame_get_buffer(dst, 32);
                     ^
  217.         if (ret < 0)
  218.             return ret;

libavutil/frame.c:187:1: Parameter `frame->nb_samples`
    185. }
    186. 
    187. int av_frame_get_buffer(AVFrame *frame, int align)
         ^
    188. {
    189.     if (frame->format < 0)

libavutil/frame.c:195:16: Call
    193.         return get_video_buffer(frame, align);
    194.     else if (frame->nb_samples > 0 && frame->channel_layout)
    195.         return get_audio_buffer(frame, align);
                        ^
    196. 
    197.     return AVERROR(EINVAL);

libavutil/frame.c:138:1: Parameter `frame->nb_samples`
      136. }
      137. 
      138. static int get_audio_buffer(AVFrame *frame, int align)
           ^
      139. {
      140.     int channels = av_get_channel_layout_nb_channels(frame->channel_layout);

libavutil/frame.c:146:15: Call
      144. 
      145.     if (!frame->linesize[0]) {
      146.         ret = av_samples_get_buffer_size(&frame->linesize[0], channels,
                         ^
      147.                                          frame->nb_samples, frame->format,
      148.                                          align);

libavutil/samplefmt.c:108:1: <LHS trace>
106. }
107. 
108. int av_samples_get_buffer_size(int *linesize, int nb_channels, int nb_samples,
     ^
109.                                enum AVSampleFormat sample_fmt, int align)
110. {

libavutil/samplefmt.c:108:1: Parameter `nb_samples`
        106. }
        107. 
        108. int av_samples_get_buffer_size(int *linesize, int nb_channels, int nb_samples,
             ^
        109.                                enum AVSampleFormat sample_fmt, int align)
        110. {

libavutil/samplefmt.c:124:9: Binary operation: ([1, 2147483616] + 32):signed32 by call to `av_frame_ref` 
        122.             return AVERROR(EINVAL);
        123.         align = 1;
        124.         nb_samples = FFALIGN(nb_samples, 32);
                     ^
        125.     }
        126. 
