libavcodec/atrac3plus.c:794: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `decode_channel_code_tab`.

libavcodec/atrac3plus.c:794:20: Call
792.                sizeof(ctx->channels[ch_num].qu_tab_idx));
793. 
794.         if ((ret = decode_channel_code_tab(bc, ctx, ch_num, avctx)) < 0)
                        ^
795.             return ret;
796.     }

libavcodec/atrac3plus.c:738:13: Call
  736.     chan->table_type = bitstream_read_bit(bc);
  737. 
  738.     switch (bitstream_read(bc, 2)) { /* switch according to coding mode */
                   ^
  739.     case 0: /* directly coded */
  740.         num_bits = ctx->use_full_table + 2;

libavcodec/bitstream.h:183:1: Parameter `bc->bits_left`
    181. 
    182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
    183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
         ^
    184. {
    185.     if (!n)

libavcodec/atrac3plus.c:794:20: Call
792.                sizeof(ctx->channels[ch_num].qu_tab_idx));
793. 
794.         if ((ret = decode_channel_code_tab(bc, ctx, ch_num, avctx)) < 0)
                        ^
795.             return ret;
796.     }

libavcodec/atrac3plus.c:727:1: Parameter `bc->bits_left`
  725.  * @return result code: 0 = OK, otherwise - error code
  726.  */
  727. static int decode_channel_code_tab(BitstreamContext *bc, Atrac3pChanUnitCtx *ctx,
       ^
  728.                                    int ch_num, AVCodecContext *avctx)
  729. {

libavcodec/atrac3plus.c:736:24: Call
  734.     Atrac3pChanParams *ref_chan = &ctx->channels[0];
  735. 
  736.     chan->table_type = bitstream_read_bit(bc);
                              ^
  737. 
  738.     switch (bitstream_read(bc, 2)) { /* switch according to coding mode */

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
    143. 
    144. /* Return one bit from the buffer. */
    145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    146. {
    147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
    148.         refill_64(bc);
    149. 
    150.     return get_val(bc, 1);
                    ^
    151. }
    152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `decode_channel_code_tab` 
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;
