libavformat/oggparsetheora.c:117: error: Integer Overflow L1
  (0 - 7):unsigned32.

libavformat/oggparsetheora.c:52:15: <LHS trace>
50. 
51.     if(!thp){
52.         thp = av_mallocz(sizeof(*thp));
                  ^
53.         os->private = thp;
54.     }

libavformat/oggparsetheora.c:52:15: Call
50. 
51.     if(!thp){
52.         thp = av_mallocz(sizeof(*thp));
                  ^
53.         os->private = thp;
54.     }

libavutil/mem.c:160:17: Call
  158. void *av_mallocz(size_t size)
  159. {
  160.     void *ptr = av_malloc(size);
                       ^
  161.     if (ptr)
  162.         memset(ptr, 0, size);

libavutil/mem.c:70:9: Assignment
    68.     /* let's disallow possible ambiguous cases */
    69.     if (size > (INT_MAX - 32) || !size)
    70.         return NULL;
                ^
    71. 
    72. #if CONFIG_MEMALIGN_HACK

libavutil/mem.c:160:5: Assignment
  158. void *av_mallocz(size_t size)
  159. {
  160.     void *ptr = av_malloc(size);
           ^
  161.     if (ptr)
  162.         memset(ptr, 0, size);

libavutil/mem.c:163:5: Assignment
  161.     if (ptr)
  162.         memset(ptr, 0, size);
  163.     return ptr;
           ^
  164. }
  165. 

libavformat/oggparsetheora.c:52:9: Assignment
50. 
51.     if(!thp){
52.         thp = av_mallocz(sizeof(*thp));
            ^
53.         os->private = thp;
54.     }

libavformat/oggparsetheora.c:53:9: Assignment
51.     if(!thp){
52.         thp = av_mallocz(sizeof(*thp));
53.         os->private = thp;
            ^
54.     }
55. 

libavformat/oggparsetheora.c:117:9: Binary operation: (0 - 7):unsigned32
115.     break;
116.     case 0x81:
117.         ff_vorbis_comment(s, &st->metadata, os->buf + os->pstart + 7, os->psize - 7);
             ^
118.     case 0x82:
119.         if (!thp->version)
