libavcodec/aac.c:791: error: Integer Overflow L2
  ([0, +oo] - 90):unsigned32 by call to `decode_scalefactors`.

libavcodec/aac.c:782:19: Call
780.     pulse.num_pulse = 0;
781. 
782.     global_gain = get_bits(gb, 8);
                       ^
783. 
784.     if (!common_window && !scale_flag) {

libavcodec/bitstream.h:642:1: Parameter `*s->buffer`
  640.  * Note, the alt bitstream reader can read up to 25 bits, but the libmpeg2 reader can't
  641.  */
  642. static inline unsigned int get_bits(GetBitContext *s, int n){
       ^
  643.     register int tmp;
  644.     OPEN_READER(re, s)

libavcodec/bitstream.h:645:5: Assignment
  643.     register int tmp;
  644.     OPEN_READER(re, s)
  645.     UPDATE_CACHE(re, s)
           ^
  646.     tmp= SHOW_UBITS(re, s, n);
  647.     LAST_SKIP_BITS(re, s, n)

libavcodec/bitstream.h:646:5: Assignment
  644.     OPEN_READER(re, s)
  645.     UPDATE_CACHE(re, s)
  646.     tmp= SHOW_UBITS(re, s, n);
           ^
  647.     LAST_SKIP_BITS(re, s, n)
  648.     CLOSE_READER(re, s)

libavcodec/bitstream.h:649:5: Assignment
  647.     LAST_SKIP_BITS(re, s, n)
  648.     CLOSE_READER(re, s)
  649.     return tmp;
           ^
  650. }
  651. 

libavcodec/aac.c:782:5: Assignment
780.     pulse.num_pulse = 0;
781. 
782.     global_gain = get_bits(gb, 8);
         ^
783. 
784.     if (!common_window && !scale_flag) {

libavcodec/aac.c:791:9: Call
789.     if (decode_band_types(ac, sce->band_type, sce->band_type_run_end, gb, ics) < 0)
790.         return -1;
791.     if (decode_scalefactors(ac, sce->sf, gb, global_gain, ics, sce->band_type, sce->band_type_run_end) < 0)
             ^
792.         return -1;
793. 

libavcodec/aac.c:540:1: <LHS trace>
538.  * @return  Returns error status. 0 - OK, !0 - error
539.  */
540. static int decode_scalefactors(AACContext * ac, float sf[120], GetBitContext * gb,
     ^
541.         unsigned int global_gain, IndividualChannelStream * ics,
542.         enum BandType band_type[120], int band_type_run_end[120]) {

libavcodec/aac.c:540:1: Parameter `global_gain`
  538.  * @return  Returns error status. 0 - OK, !0 - error
  539.  */
  540. static int decode_scalefactors(AACContext * ac, float sf[120], GetBitContext * gb,
       ^
  541.         unsigned int global_gain, IndividualChannelStream * ics,
  542.         enum BandType band_type[120], int band_type_run_end[120]) {

libavcodec/aac.c:545:21: Binary operation: ([0, +oo] - 90):unsigned32 by call to `decode_scalefactors` 
  543.     const int sf_offset = ac->sf_offset + (ics->window_sequence[0] == EIGHT_SHORT_SEQUENCE ? 12 : 0);
  544.     int g, i, idx = 0;
  545.     int offset[3] = { global_gain, global_gain - 90, 100 };
                           ^
  546.     int noise_flag = 1;
  547.     static const char *sf_str[3] = { "Global gain", "Noise gain", "Intensity stereo position" };
