libavformat/asfdec.c:295: error: Integer Overflow L2
  (2 × [`len`, min(2147483646, `len`)]):signed32.

libavformat/asfdec.c:287:1: <RHS trace>
285. }
286. 
287. static void get_tag(AVFormatContext *s, const char *key, int type, int len, int type2_size)
     ^
288. {
289.     char *value;

libavformat/asfdec.c:287:1: Parameter `len`
285. }
286. 
287. static void get_tag(AVFormatContext *s, const char *key, int type, int len, int type2_size)
     ^
288. {
289.     char *value;

libavformat/asfdec.c:295:13: Binary operation: (2 × [len, min(2147483646, len)]):signed32
293.         return;
294. 
295.     value = av_malloc(2 * len + 1);
                 ^
296.     if (!value)
297.         goto finish;
