libavcodec/rv34.c:1474: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_er_frame_end`.

libavcodec/rv34.c:1474:9: Call
1472.         if(r->loop_filter)
1473.             r->loop_filter(r, s->mb_height - 1);
1474.         ff_er_frame_end(s);
              ^
1475.         MPV_frame_end(s);
1476.         if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) {

libavcodec/error_resilience.c:781:1: Parameter `s->list_count`
  779. }
  780. 
  781. void ff_er_frame_end(MpegEncContext *s){
       ^
  782.     int i, mb_x, mb_y, error, error_type, dc_error, mv_error, ac_error;
  783.     int distance;

libavcodec/error_resilience.c:944:22: Call
  942.     av_log(s->avctx, AV_LOG_INFO, "concealing %d DC, %d AC, %d MV errors\n", dc_error, ac_error, mv_error);
  943. 
  944.     is_intra_likely= is_intra_more_likely(s);
                            ^
  945. 
  946.     /* set unknown mb-type to most likely */

libavcodec/error_resilience.c:640:1: Parameter `s->list_count`
    638. }
    639. 
    640. static int is_intra_more_likely(MpegEncContext *s){
         ^
    641.     int is_intra_likely, i, j, undamaged_count, skip_amount, mb_x, mb_y;
    642. 

libavcodec/error_resilience.c:1000:13: Call
   998.             s->mb_x= mb_x;
   999.             s->mb_y= mb_y;
  1000.             decode_mb(s, 0/*FIXME h264 partitioned slices need this set*/);
                    ^
  1001.         }
  1002.     }

libavcodec/error_resilience.c:43:1: Parameter `s->list_count`
    41. #undef mb_intra
    42. 
    43. static void decode_mb(MpegEncContext *s, int ref){
        ^
    44.     s->dest[0] = s->current_picture.f.data[0] + (s->mb_y *  16 * s->linesize)                         + s->mb_x *  16;
    45.     s->dest[1] = s->current_picture.f.data[1] + (s->mb_y * (16 >> s->chroma_y_shift) * s->uvlinesize) + s->mb_x * (16 >> s->chroma_x_shift);

libavcodec/error_resilience.c:59:9: Call
    57.         fill_rectangle(h->mv_cache[0][ scan8[0] ], 4, 4, 8, pack16to32(s->mv[0][0][0],s->mv[0][0][1]), 4);
    58.         assert(!FRAME_MBAFF);
    59.         ff_h264_hl_decode_mb(h);
                ^
    60.     }else{
    61.         assert(ref==0);

libavcodec/h264.c:2172:1: Parameter `h->list_count`
      2170. }
      2171. 
      2172. void ff_h264_hl_decode_mb(H264Context *h){
            ^
      2173.     MpegEncContext * const s = &h->s;
      2174.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2180:13: Call
      2178.     if (CHROMA444) {
      2179.         if(is_complex || h->pixel_shift)
      2180.             hl_decode_mb_444_complex(h);
                        ^
      2181.         else
      2182.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2164:1: Parameter `h->list_count`
        2162. }
        2163. 
        2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
              ^
        2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
        2166. }

libavcodec/h264.c:2165:5: Call
        2163. 
        2164. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
        2165.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
                  ^
        2166. }
        2167. 

libavcodec/h264.c:2051:1: Parameter `h->list_count`
          2049. }
          2050. 
          2051. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
                ^
          2052.     MpegEncContext * const s = &h->s;
          2053.     const int mb_x= s->mb_x;

libavcodec/h264.c:2130:13: Call
          2128.                 xchg_mb_border(h, dest[0], dest[1], dest[2], linesize, linesize, 0, 1, simple, pixel_shift);
          2129.         }else{
          2130.             hl_motion(h, dest[0], dest[1], dest[2],
                            ^
          2131.                       s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
          2132.                       s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:715:1: Parameter `h->list_count`
            713. }
            714. 
            715. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
                 ^
            716.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
            717.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:728:9: Call
            726. 
            727.     if(HAVE_THREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
            728.         await_references(h);
                         ^
            729.     prefetch_motion(h, 0, pixel_shift, chroma_idc);
            730. 

libavcodec/h264.c:290:1: <LHS trace>
288.  * @param h the H264 context
289.  */
290. static void await_references(H264Context *h){
     ^
291.     MpegEncContext * const s = &h->s;
292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:290:1: Parameter `h->list_count`
              288.  * @param h the H264 context
              289.  */
              290. static void await_references(H264Context *h){
                   ^
              291.     MpegEncContext * const s = &h->s;
              292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:348:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_er_frame_end` 
              346.     }
              347. 
              348.     for(list=h->list_count-1; list>=0; list--){
                           ^
              349.         for(ref=0; ref<48 && nrefs[list]; ref++){
              350.             int row = refs[list][ref];
