libavcodec/on2avc.c:173: error: Integer Overflow L2
  ([0, +oo] - 9):unsigned32 by call to `bitstream_read_vlc`.

libavcodec/on2avc.c:140:1: Parameter `bc->bits_left`
138. // completely not like Table 18 in ISO/IEC 13818-7
139. // (no intensity stereo, different coding for the first coefficient)
140. static int on2avc_decode_band_scales(On2AVCContext *c, BitstreamContext *bc)
     ^
141. {
142.     int w, w2, b, scale, first = 1;

libavcodec/on2avc.c:173:26: Call
171.                 first = 0;
172.             } else {
173.                 scale += bitstream_read_vlc(bc, c->scale_diff.table, 9, 3) - 60;
                              ^
174.             }
175.             if (scale < 0 || scale > 127) {

libavcodec/bitstream.h:313:1: Parameter `bits`
  311.  * If the VLC code is invalid and max_depth > 1, then the number of bits removed
  312.  * is undefined. */
  313. static inline int bitstream_read_vlc(BitstreamContext *bc, VLC_TYPE (*table)[2],
       ^
  314.                                      int bits, int max_depth)
  315. {

libavcodec/bitstream.h:322:9: Call
  320. 
  321.     if (max_depth > 1 && n < 0) {
  322.         skip_remaining(bc, bits);
               ^
  323.         code = set_idx(bc, code, &n, &nb_bits, table);
  324.         if (max_depth > 2 && n < 0) {

libavcodec/bitstream.h:230:1: <LHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `bc->bits_left`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: <RHS trace>
228. }
229. 
230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
     ^
231. {
232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:230:1: Parameter `n`
    228. }
    229. 
    230. static inline void skip_remaining(BitstreamContext *bc, unsigned n)
         ^
    231. {
    232. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:237:5: Binary operation: ([0, +oo] - 9):unsigned32 by call to `bitstream_read_vlc` 
    235.     bc->bits <<= n;
    236. #endif
    237.     bc->bits_left -= n;
             ^
    238. }
    239. 
