libavcodec/h264dec.c:742: error: Integer Overflow L2
  ([8, 2147483648] + [8, 2147483648]):signed32 by call to `decode_nal_units`.

libavcodec/h264dec.c:742:17: Call
740.     }
741. 
742.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
743.     if (buf_index < 0)
744.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:528:11: Call
  526.     }
  527. 
  528.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  529.                                 h->nal_length_size, avctx->codec_id);
  530.     if (ret < 0) {

libavcodec/h2645_parse.c:301:15: Call
    299.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    300. 
    301.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    302.         if (ret < 0)
    303.             return ret;

libavcodec/get_bits.h:362:1: Parameter `bit_size`
      360.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      361.  */
      362. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      363.                                 int bit_size)
      364. {

libavcodec/get_bits.h:379:5: Assignment
      377.     s->size_in_bits       = bit_size;
      378. #if !UNCHECKED_BITSTREAM_READER
      379.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      380. #endif
      381.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264dec.c:742:17: Call
740.     }
741. 
742.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
743.     if (buf_index < 0)
744.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:515:1: Parameter `*h->cur_pic.qscale_table`
  513. }
  514. 
  515. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size)
       ^
  516. {
  517.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264dec.c:633:11: Call
  631.     }
  632. 
  633.     ret = ff_h264_execute_decode_slices(h);
                 ^
  634.     if (ret < 0 && (h->avctx->err_recognition & AV_EF_EXPLODE))
  635.         goto end;

libavcodec/h264_slice.c:2488:1: Parameter `*h->cur_pic.qscale_table`
    2486.  * @param h h264 master context
    2487.  */
    2488. int ff_h264_execute_decode_slices(H264Context *h)
          ^
    2489. {
    2490.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2549:21: Call
    2547.                 for (j = sl->resync_mb_y; j < y_end; j += 1 + FIELD_OR_MBAFF_PICTURE(h)) {
    2548.                     sl->mb_y = j;
    2549.                     loop_filter(h, sl, j > sl->resync_mb_y ? 0 : sl->resync_mb_x,
                              ^
    2550.                                 j == y_end - 1 ? x_end : h->mb_width);
    2551.                 }

libavcodec/h264_slice.c:2165:1: Parameter `*h->cur_pic.qscale_table`
      2163. }
      2164. 
      2165. static void loop_filter(const H264Context *h, H264SliceContext *sl, int start_x, int end_x)
            ^
      2166. {
      2167.     uint8_t *dest_y, *dest_cb, *dest_cr;

libavcodec/h264_slice.c:2214:21: Call
      2212.                 backup_mb_border(h, sl, dest_y, dest_cb, dest_cr, linesize,
      2213.                                  uvlinesize, 0);
      2214.                 if (fill_filter_caches(h, sl, mb_type))
                                ^
      2215.                     continue;
      2216.                 sl->chroma_qp[0] = get_chroma_qp(h->ps.pps, 0, h->cur_pic.qscale_table[mb_xy]);

libavcodec/h264_slice.c:2023:1: <LHS trace>
2021.  * @return non zero if the loop filter can be skipped
2022.  */
2023. static int fill_filter_caches(const H264Context *h, H264SliceContext *sl, int mb_type)
      ^
2024. {
2025.     const int mb_xy = sl->mb_xy;

libavcodec/h264_slice.c:2023:1: Parameter `sl->qp_thresh`
        2021.  * @return non zero if the loop filter can be skipped
        2022.  */
        2023. static int fill_filter_caches(const H264Context *h, H264SliceContext *sl, int mb_type)
              ^
        2024. {
        2025.     const int mb_xy = sl->mb_xy;

libavcodec/h264_slice.c:2056:9: Assignment
        2054.          * This is a conservative estimate: could also check beta_offset
        2055.          * and more accurate chroma_qp. */
        2056.         int qp_thresh = sl->qp_thresh; // FIXME strictly we should store qp_thresh for each mb of a slice
                      ^
        2057.         int qp        = h->cur_pic.qscale_table[mb_xy];
        2058.         if (qp <= qp_thresh &&

libavcodec/h264_slice.c:2023:1: <RHS trace>
2021.  * @return non zero if the loop filter can be skipped
2022.  */
2023. static int fill_filter_caches(const H264Context *h, H264SliceContext *sl, int mb_type)
      ^
2024. {
2025.     const int mb_xy = sl->mb_xy;

libavcodec/h264_slice.c:2023:1: Parameter `*h->cur_pic.qscale_table`
        2021.  * @return non zero if the loop filter can be skipped
        2022.  */
        2023. static int fill_filter_caches(const H264Context *h, H264SliceContext *sl, int mb_type)
              ^
        2024. {
        2025.     const int mb_xy = sl->mb_xy;

libavcodec/h264_slice.c:2060:14: Binary operation: ([8, 2147483648] + [8, 2147483648]):signed32 by call to `decode_nal_units` 
        2058.         if (qp <= qp_thresh &&
        2059.             (left_xy[LTOP] < 0 ||
        2060.              ((qp + h->cur_pic.qscale_table[left_xy[LTOP]] + 1) >> 1) <= qp_thresh) &&
                           ^
        2061.             (top_xy < 0 ||
        2062.              ((qp + h->cur_pic.qscale_table[top_xy] + 1) >> 1) <= qp_thresh)) {
