libavcodec/h264dec.c:745: error: Integer Overflow L2
  ([0, 2147483647] × 16):signed32 by call to `ff_h264_field_end`.

libavcodec/h264dec.c:726:17: Call
724.     }
725. 
726.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
727.     if (buf_index < 0)
728.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:532:11: Call
  530.     }
  531. 
  532.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  533.                                 h->nal_length_size, avctx->codec_id);
  534.     if (ret < 0) {

libavcodec/h2645_parse.c:303:15: Call
    301.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    302. 
    303.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    304.         if (ret < 0)
    305.             return ret;

libavcodec/get_bits.h:362:1: Parameter `bit_size`
      360.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      361.  */
      362. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      363.                                 int bit_size)
      364. {

libavcodec/get_bits.h:379:5: Assignment
      377.     s->size_in_bits       = bit_size;
      378. #if !UNCHECKED_BITSTREAM_READER
      379.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      380. #endif
      381.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264dec.c:745:13: Call
743.         (h->mb_y >= h->mb_height && h->mb_height)) {
744.         if (h->field_started)
745.             ff_h264_field_end(h, &h->slice_ctx[0], 0);
                 ^
746. 
747.         *got_frame = 0;

libavcodec/h264_picture.c:145:1: Parameter `sl->er.mb_height`
  143. #endif /* CONFIG_ERROR_RESILIENCE */
  144. 
  145. int ff_h264_field_end(H264Context *h, H264SliceContext *sl, int in_setup)
       ^
  146. {
  147.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_picture.c:190:9: Call
  188.         h264_set_erpic(&sl->er.next_pic,
  189.                        sl->ref_count[1] ? sl->ref_list[1][0].parent : NULL);
  190.         ff_er_frame_end(&sl->er);
               ^
  191.     }
  192. #endif /* CONFIG_ERROR_RESILIENCE */

libavcodec/error_resilience.c:1011:10: Assignment
    1009. 
    1010.     /* handle inter blocks with damaged AC */
    1011.     for (mb_y = 0; mb_y < s->mb_height; mb_y++) {
                   ^
    1012.         for (mb_x = 0; mb_x < s->mb_width; mb_x++) {
    1013.             const int mb_xy   = mb_x + mb_y * s->mb_stride;

libavcodec/error_resilience.c:1092:9: Call
    1090.         }
    1091.     } else
    1092.         guess_mv(s);
                  ^
    1093. 
    1094.     /* fill DC for inter blocks */

libavcodec/error_resilience.c:357:1: <LHS trace>
355. }
356. 
357. static void guess_mv(ERContext *s)
     ^
358. {
359.     uint8_t *fixed = s->er_temp_buffer;

libavcodec/error_resilience.c:357:1: Parameter `s->mb_height`
      355. }
      356. 
      357. static void guess_mv(ERContext *s)
           ^
      358. {
      359.     uint8_t *fixed = s->er_temp_buffer;

libavcodec/error_resilience.c:580:25: Binary operation: ([0, 2147483647] × 16):signed32 by call to `ff_h264_field_end` 
      578.                         int *linesize = s->cur_pic.f->linesize;
      579.                         int score = 0;
      580.                         uint8_t *src = s->cur_pic.f->data[0] +
                                   ^
      581.                                        mb_x * 16 + mb_y * 16 * linesize[0];
      582. 
