libavcodec/h264.c:1046: error: Integer Overflow L2
  ([0, 2147483647] + 1):signed32 by call to `decode_nal_units`.

libavcodec/h264.c:1046:17: Call
1044.     }
1045. 
1046.     buf_index = decode_nal_units(h, buf, buf_size);
                      ^
1047.     if (buf_index < 0)
1048.         return AVERROR_INVALIDDATA;

libavcodec/h264.c:818:11: Call
  816.     }
  817. 
  818.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  819.                                 h->nal_length_size, avctx->codec_id);
  820.     if (ret < 0) {

libavcodec/h2645_parse.c:260:15: Call
    258.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    259. 
    260.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    261.         if (ret < 0)
    262.             return ret;

libavcodec/get_bits.h:384:1: Parameter `bit_size`
      382.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      383.  */
      384. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      385.                                 int bit_size)
      386. {

libavcodec/get_bits.h:401:5: Assignment
      399.     s->size_in_bits       = bit_size;
      400. #if !UNCHECKED_BITSTREAM_READER
      401.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      402. #endif
      403.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264.c:1046:17: Call
1044.     }
1045. 
1046.     buf_index = decode_nal_units(h, buf, buf_size);
                      ^
1047.     if (buf_index < 0)
1048.         return AVERROR_INVALIDDATA;

libavcodec/h264.c:804:1: Parameter `h->slice_ctx->list_count`
  802. }
  803. 
  804. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size)
       ^
  805. {
  806.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264.c:950:15: Call
  948.     }
  949.     if (context_count) {
  950.         ret = ff_h264_execute_decode_slices(h, context_count);
                     ^
  951.         if (ret < 0 && (h->avctx->err_recognition & AV_EF_EXPLODE))
  952.             goto end;

libavcodec/h264_slice.c:2113:1: Parameter `h->slice_ctx->list_count`
    2111.  * @param context_count number of contexts to execute
    2112.  */
    2113. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
          ^
    2114. {
    2115.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2127:15: Call
    2125.         h->postpone_filter = 0;
    2126. 
    2127.         ret = decode_slice(avctx, &h->slice_ctx[0]);
                        ^
    2128.         h->mb_y = h->slice_ctx[0].mb_y;
    2129.         return ret;

libavcodec/h264_slice.c:1917:1: Parameter `arg->list_count`
      1915. }
      1916. 
      1917. static int decode_slice(struct AVCodecContext *avctx, void *arg)
            ^
      1918. {
      1919.     H264SliceContext *sl = arg;

libavcodec/h264_slice.c:1962:19: Call
      1960.             }
      1961. 
      1962.             ret = ff_h264_decode_mb_cabac(h, sl);
                              ^
      1963.             // STOP_TIMER("decode_mb_cabac")
      1964. 

libavcodec/h264_cabac.c:1909:1: Parameter `sl->list_count`
        1907.  * @return 0 if OK, ER_AC_ERROR / ER_DC_ERROR / ER_MV_ERROR if an error is noticed
        1908.  */
        1909. int ff_h264_decode_mb_cabac(const H264Context *h, H264SliceContext *sl)
              ^
        1910. {
        1911.     const SPS *sps = h->ps.sps;

libavcodec/h264_slice.c:1966:17: Call
      1964. 
      1965.             if (ret >= 0)
      1966.                 ff_h264_hl_decode_mb(h, sl);
                            ^
      1967. 
      1968.             // FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264_mb.c:792:1: Parameter `sl->list_count`
        790. #include "h264_mb_template.c"
        791. 
        792. void ff_h264_hl_decode_mb(const H264Context *h, H264SliceContext *sl)
             ^
        793. {
        794.     const int mb_xy   = sl->mb_xy;

libavcodec/h264_mb.c:805:9: Call
        803.             hl_decode_mb_444_simple_8(h, sl);
        804.     } else if (is_complex) {
        805.         hl_decode_mb_complex(h, sl);
                     ^
        806.     } else if (h->pixel_shift) {
        807.         hl_decode_mb_simple_16(h, sl);

libavcodec/h264_mb_template.c:41:1: <LHS trace>
39. #include "h264_mc_template.c"
40. 
41. static av_noinline void FUNC(hl_decode_mb)(const H264Context *h, H264SliceContext *sl)
    ^
42. {
43.     const int mb_x    = sl->mb_x;

libavcodec/h264_mb_template.c:41:1: Parameter `sl->list_count`
          39. #include "h264_mc_template.c"
          40. 
          41. static av_noinline void FUNC(hl_decode_mb)(const H264Context *h, H264SliceContext *sl)
              ^
          42. {
          43.     const int mb_x    = sl->mb_x;

libavcodec/h264_mb_template.c:76:51: Binary operation: ([0, 2147483647] + 1):signed32 by call to `decode_nal_units` 
          74.         if (FRAME_MBAFF(h)) {
          75.             int list;
          76.             for (list = 0; list < sl->list_count; list++) {
                                                                ^
          77.                 if (!USES_LIST(mb_type, list))
          78.                     continue;
