libavcodec/ffv1dec.c:190: error: Integer Overflow L2
  ([1, +oo] - 8):unsigned32 by call to `decode_line`.

libavcodec/ffv1dec.c:190:13: Call
188. // { START_TIMER
189.         if (s->avctx->bits_per_raw_sample <= 8) {
190.             decode_line(s, w, sample, plane_index, 8);
                 ^
191.             for (x = 0; x < w; x++)
192.                 src[x + stride * y] = sample[1][x];

libavcodec/ffv1dec.c:96:1: Parameter `bits`
  94. }
  95. 
  96. static av_always_inline void decode_line(FFV1Context *s, int w,
      ^
  97.                                          int16_t *sample[2],
  98.                                          int plane_index, int bits)

libavcodec/ffv1dec.c:145:33: Call
  143.                     run_mode  = 0;
  144.                     run_count = 0;
  145.                     diff      = get_vlc_symbol(&s->bc, &p->vlc_state[context],
                                       ^
  146.                                                bits);
  147.                     if (diff >= 0)

libavcodec/ffv1dec.c:69:1: Parameter `bits`
    67. }
    68. 
    69. static inline int get_vlc_symbol(BitstreamContext *bc, VlcState *const state,
        ^
    70.                                  int bits)
    71. {

libavcodec/ffv1dec.c:83:9: Call
    81.     assert(k <= 8);
    82. 
    83.     v = get_sr_golomb(bc, k, 12, bits);
                ^
    84.     ff_dlog(NULL, "v:%d bias:%d error:%d drift:%d count:%d k:%d",
    85.             v, state->bias, state->error_sum, state->drift, state->count, k);

libavcodec/golomb.h:317:1: Parameter `esc_len`
      315.  * read signed golomb rice code (ffv1).
      316.  */
      317. static inline int get_sr_golomb(BitstreamContext *bc, int k, int limit,
           ^
      318.                                 int esc_len)
      319. {

libavcodec/golomb.h:320:13: Call
      318.                                 int esc_len)
      319. {
      320.     int v = get_ur_golomb(bc, k, limit, esc_len);
                       ^
      321. 
      322.     v++;

libavcodec/golomb.h:248:1: Parameter `esc_len`
        246.  * read unsigned golomb rice code (ffv1).
        247.  */
        248. static inline int get_ur_golomb(BitstreamContext *bc, int k, int limit,
             ^
        249.                                 int esc_len)
        250. {

libavcodec/golomb.h:266:15: Call
        264.     } else {
        265.         bitstream_skip(bc, limit);
        266.         buf = bitstream_read(bc, esc_len);
                           ^
        267. 
        268.         return buf + limit - 1;

libavcodec/bitstream.h:183:1: Parameter `n`
          181. 
          182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
          183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
               ^
          184. {
          185.     if (!n)

libavcodec/bitstream.h:194:12: Call
          192.     }
          193. 
          194.     return get_val(bc, n);
                          ^
          195. }
          196. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
            128. }
            129. 
            130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
                 ^
            131. {
            132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
            128. }
            129. 
            130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
                 ^
            131. {
            132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([1, +oo] - 8):unsigned32 by call to `decode_line` 
            137.     bc->bits <<= n;
            138. #endif
            139.     bc->bits_left -= n;
                     ^
            140. 
            141.     return ret;
