libavcodec/opus_celt.c:1807: error: Integer Overflow L2
  ([0, +oo] - 3):unsigned32 by call to `opus_getrawbits`.

libavcodec/opus_celt.c:1805:22: Call
1803.             int tapset, octave, period;
1804. 
1805.             octave = opus_rc_unimodel(rc, 6);
                           ^
1806.             period = (16 << octave) + opus_getrawbits(rc, 4 + octave) - 1;
1807.             gain   = 0.09375f * (opus_getrawbits(rc, 3) + 1);

libavcodec/opus.h:286:1: Parameter `rc->rb.cachelen`
  284.  * CELT: read a uniform distribution
  285.  */
  286. static av_always_inline unsigned int opus_rc_unimodel(OpusRangeCoder *rc, unsigned int size)
       ^
  287. {
  288.     unsigned int bits, k, scale, total;

libavcodec/opus_celt.c:1806:39: Call
1804. 
1805.             octave = opus_rc_unimodel(rc, 6);
1806.             period = (16 << octave) + opus_getrawbits(rc, 4 + octave) - 1;
                                            ^
1807.             gain   = 0.09375f * (opus_getrawbits(rc, 3) + 1);
1808.             tapset = (opus_rc_tell(rc) + 2 <= s->framebits) ?

libavcodec/opus.h:265:1: Parameter `count`
  263.  * CELT: read 1-25 raw bits at the end of the frame, backwards byte-wise
  264.  */
  265. static av_always_inline unsigned int opus_getrawbits(OpusRangeCoder *rc, unsigned int count)
       ^
  266. {
  267.     unsigned int value = 0;

libavcodec/opus.h:277:5: Assignment
  275.     value = rc->rb.cacheval & ((1<<count)-1);
  276.     rc->rb.cacheval    >>= count;
  277.     rc->rb.cachelen     -= count;
           ^
  278.     rc->total_read_bits += count;
  279. 

libavcodec/opus_celt.c:1807:34: Call
1805.             octave = opus_rc_unimodel(rc, 6);
1806.             period = (16 << octave) + opus_getrawbits(rc, 4 + octave) - 1;
1807.             gain   = 0.09375f * (opus_getrawbits(rc, 3) + 1);
                                       ^
1808.             tapset = (opus_rc_tell(rc) + 2 <= s->framebits) ?
1809.                      opus_rc_getsymbol(rc, celt_model_tapset) : 0;

libavcodec/opus.h:265:1: <LHS trace>
263.  * CELT: read 1-25 raw bits at the end of the frame, backwards byte-wise
264.  */
265. static av_always_inline unsigned int opus_getrawbits(OpusRangeCoder *rc, unsigned int count)
     ^
266. {
267.     unsigned int value = 0;

libavcodec/opus.h:265:1: Parameter `count`
  263.  * CELT: read 1-25 raw bits at the end of the frame, backwards byte-wise
  264.  */
  265. static av_always_inline unsigned int opus_getrawbits(OpusRangeCoder *rc, unsigned int count)
       ^
  266. {
  267.     unsigned int value = 0;

libavcodec/opus.h:265:1: <RHS trace>
263.  * CELT: read 1-25 raw bits at the end of the frame, backwards byte-wise
264.  */
265. static av_always_inline unsigned int opus_getrawbits(OpusRangeCoder *rc, unsigned int count)
     ^
266. {
267.     unsigned int value = 0;

libavcodec/opus.h:265:1: Parameter `count`
  263.  * CELT: read 1-25 raw bits at the end of the frame, backwards byte-wise
  264.  */
  265. static av_always_inline unsigned int opus_getrawbits(OpusRangeCoder *rc, unsigned int count)
       ^
  266. {
  267.     unsigned int value = 0;

libavcodec/opus.h:277:5: Binary operation: ([0, +oo] - 3):unsigned32 by call to `opus_getrawbits` 
  275.     value = rc->rb.cacheval & ((1<<count)-1);
  276.     rc->rb.cacheval    >>= count;
  277.     rc->rb.cachelen     -= count;
           ^
  278.     rc->total_read_bits += count;
  279. 
