libavcodec/svq3.c:1050: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1050:17: Call
1048. 
1049.             if (mb_type != 0) {
1050.                 ff_h264_hl_decode_mb (h);
                      ^
1051.             }
1052. 

libavcodec/h264.c:2078:1: Parameter `h->list_count`
  2076. }
  2077. 
  2078. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  2079.     MpegEncContext * const s = &h->s;
  2080.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2086:13: Call
  2084.     if (CHROMA444) {
  2085.         if(is_complex || h->pixel_shift)
  2086.             hl_decode_mb_444_complex(h);
                    ^
  2087.         else
  2088.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2070:1: Parameter `h->list_count`
    2068. }
    2069. 
    2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
          ^
    2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
    2072. }

libavcodec/h264.c:2071:5: Call
    2069. 
    2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
    2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2072. }
    2073. 

libavcodec/h264.c:1950:1: Parameter `h->list_count`
      1948. }
      1949. 
      1950. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
            ^
      1951.     MpegEncContext * const s = &h->s;
      1952.     const int mb_x= s->mb_x;

libavcodec/svq3.c:1050:17: Call
1048. 
1049.             if (mb_type != 0) {
1050.                 ff_h264_hl_decode_mb (h);
                      ^
1051.             }
1052. 

libavcodec/h264.c:2078:1: Parameter `h->list_count`
  2076. }
  2077. 
  2078. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  2079.     MpegEncContext * const s = &h->s;
  2080.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2086:13: Call
  2084.     if (CHROMA444) {
  2085.         if(is_complex || h->pixel_shift)
  2086.             hl_decode_mb_444_complex(h);
                    ^
  2087.         else
  2088.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2070:1: Parameter `h->list_count`
    2068. }
    2069. 
    2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
          ^
    2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
    2072. }

libavcodec/h264.c:2071:5: Call
    2069. 
    2070. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
    2071.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
              ^
    2072. }
    2073. 

libavcodec/h264.c:1950:1: Parameter `h->list_count`
      1948. }
      1949. 
      1950. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
            ^
      1951.     MpegEncContext * const s = &h->s;
      1952.     const int mb_x= s->mb_x;

libavcodec/h264.c:2030:17: Call
      2028.         }else{
      2029.             if (pixel_shift) {
      2030.                 hl_motion_16(h, dest[0], dest[1], dest[2],
                            ^
      2031.                              s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
      2032.                              s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:806:1: Parameter `h->list_count`
        804. }
        805. hl_motion_fn(0, 8);
        806. hl_motion_fn(1, 16);
             ^
        807. 
        808. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:806:1: Call
        804. }
        805. hl_motion_fn(0, 8);
        806. hl_motion_fn(1, 16);
             ^
        807. 
        808. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:689:1: Parameter `h->list_count`
          687. }
          688. 
          689. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
               ^
          690.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
          691.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:701:9: Call
          699. 
          700.     if(HAVE_PTHREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
          701.         await_references(h);
                       ^
          702.     prefetch_motion(h, 0, pixel_shift, chroma444);
          703. 

libavcodec/h264.c:299:1: <LHS trace>
297.  * @param h the H264 context
298.  */
299. static void await_references(H264Context *h){
     ^
300.     MpegEncContext * const s = &h->s;
301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:299:1: Parameter `h->list_count`
            297.  * @param h the H264 context
            298.  */
            299. static void await_references(H264Context *h){
                 ^
            300.     MpegEncContext * const s = &h->s;
            301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:357:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
            355.     }
            356. 
            357.     for(list=h->list_count-1; list>=0; list--){
                         ^
            358.         for(ref=0; ref<48 && nrefs[list]; ref++){
            359.             int row = refs[list][ref];
