libavcodec/opusdec.c:194: error: Integer Overflow L2
  ([0, max(2147483647, `s->redundancy_rc.value`)] - [-oo, max(2147483647, `s->redundancy_rc.value`)]):unsigned32 by call to `ff_celt_decode_frame`.

libavcodec/opusdec.c:180:1: Parameter `s->redundancy_rc.value`
178. }
179. 
180. static int opus_decode_redundancy(OpusStreamContext *s, const uint8_t *data, int size)
     ^
181. {
182.     int ret;

libavcodec/opusdec.c:189:11: Call
187.         bw = OPUS_BANDWIDTH_WIDEBAND;
188. 
189.     ret = opus_rc_init(&s->redundancy_rc, data, size);
               ^
190.     if (ret < 0)
191.         goto fail;

libavcodec/opusdec.c:81:1: Parameter `rc->value`
  79.  * Range decoder
  80.  */
  81. static int opus_rc_init(OpusRangeCoder *rc, const uint8_t *data, int size)
      ^
  82. {
  83.     int ret = bitstream_init8(&rc->bc, data, size);

libavcodec/opusdec.c:194:11: Call
192.     opus_raw_init(&s->redundancy_rc, data + size, size);
193. 
194.     ret = ff_celt_decode_frame(s->celt, &s->redundancy_rc,
               ^
195.                                s->redundancy_output,
196.                                s->packet.stereo + 1, 240,

libavcodec/opus_celt.c:1976:1: Parameter `rc->value`
  1974. }
  1975. 
  1976. int ff_celt_decode_frame(CeltContext *s, OpusRangeCoder *rc,
        ^
  1977.                          float **output, int coded_channels, int frame_size,
  1978.                          int startband,  int endband)

libavcodec/opus_celt.c:2026:19: Call
  2024.         silence = 1;
  2025.     else if (consumed == 1)
  2026.         silence = opus_rc_p2model(rc, 15);
                          ^
  2027. 
  2028. 

libavcodec/opus.h:234:1: <LHS trace>
232. }
233. 
234. static av_always_inline unsigned int opus_rc_p2model(OpusRangeCoder *rc, unsigned int bits)
     ^
235. {
236.     unsigned int k, scale;

libavcodec/opus.h:234:1: Parameter `rc->value`
    232. }
    233. 
    234. static av_always_inline unsigned int opus_rc_p2model(OpusRangeCoder *rc, unsigned int bits)
         ^
    235. {
    236.     unsigned int k, scale;

libavcodec/opus.h:234:1: <RHS trace>
232. }
233. 
234. static av_always_inline unsigned int opus_rc_p2model(OpusRangeCoder *rc, unsigned int bits)
     ^
235. {
236.     unsigned int k, scale;

libavcodec/opus.h:234:1: Parameter `rc->value`
    232. }
    233. 
    234. static av_always_inline unsigned int opus_rc_p2model(OpusRangeCoder *rc, unsigned int bits)
         ^
    235. {
    236.     unsigned int k, scale;

libavcodec/opus.h:240:9: Binary operation: ([0, max(2147483647, s->redundancy_rc.value)] - [-oo, max(2147483647, s->redundancy_rc.value)]):unsigned32 by call to `ff_celt_decode_frame` 
    238. 
    239.     if (rc->value >= scale) {
    240.         rc->value -= scale;
                 ^
    241.         rc->range -= scale;
    242.         k = 0;
