libavcodec/cavsdec.c:734: error: Integer Overflow L2
  (32 - [-2+min(64, `h->bc.bits_left`), max(63, `h->bc.bits_left`)]):unsigned32 by call to `ff_cavs_mv`.

libavcodec/cavsdec.c:717:1: Parameter `h->bc.bits_left`
715. }
716. 
717. static void decode_mb_p(AVSContext *h, enum cavs_mb mb_type)
     ^
718. {
719.     BitstreamContext *bc = &h->bc;

libavcodec/cavsdec.c:734:9: Call
732.         ref[0] = h->ref_flag ? 0 : bitstream_read_bit(bc);
733.         ref[2] = h->ref_flag ? 0 : bitstream_read_bit(bc);
734.         ff_cavs_mv(h, MV_FWD_X0, MV_FWD_C2, MV_PRED_TOP,    BLK_16X8, ref[0]);
             ^
735.         ff_cavs_mv(h, MV_FWD_X2, MV_FWD_A1, MV_PRED_LEFT,   BLK_16X8, ref[2]);
736.         break;

libavcodec/cavs.c:566:1: Parameter `h->bc.bits_left`
  564. }
  565. 
  566. void ff_cavs_mv(AVSContext *h, enum cavs_mv_loc nP, enum cavs_mv_loc nC,
       ^
  567.                 enum cavs_mv_pred mode, enum cavs_block size, int ref)
  568. {

libavcodec/cavs.c:606:19: Call
  604. 
  605.     if (mode < MV_PRED_PSKIP) {
  606.         mvP->x += get_se_golomb(&h->bc);
                         ^
  607.         mvP->y += get_se_golomb(&h->bc);
  608.     }

libavcodec/golomb.h:166:1: Parameter `bc->bits_left`
    164.  * read signed exp golomb code.
    165.  */
    166. static inline int get_se_golomb(BitstreamContext *bc)
         ^
    167. {
    168.     unsigned int buf;

libavcodec/golomb.h:170:11: Call
    168.     unsigned int buf;
    169. 
    170.     buf = bitstream_peek(bc, 32);
                   ^
    171. 
    172.     if (buf >= (1 << 27)) {

libavcodec/bitstream.h:215:1: Parameter `n`
      213. /* Return n bits from the buffer, but do not change the buffer state.
      214.  * n has to be in the 0-32 range. */
      215. static inline unsigned bitstream_peek(BitstreamContext *bc, unsigned n)
           ^
      216. {
      217.     if (n > bc->bits_left)

libavcodec/bitstream.h:218:9: Call
      216. {
      217.     if (n > bc->bits_left)
      218.         refill_32(bc);
                   ^
      219. 
      220.     return show_val(bc, n);

libavcodec/bitstream.h:60:1: <RHS trace>
58. }
59. 
60. static inline void refill_32(BitstreamContext *bc)
    ^
61. {
62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:60:1: Parameter `bc->bits_left`
        58. }
        59. 
        60. static inline void refill_32(BitstreamContext *bc)
            ^
        61. {
        62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:68:5: Binary operation: (32 - [-2+min(64, h->bc.bits_left), max(63, h->bc.bits_left)]):unsigned32 by call to `ff_cavs_mv` 
        66.     bc->bits       = (uint64_t)AV_RL32(bc->ptr) << bc->bits_left | bc->bits;
        67. #else
        68.     bc->bits       = bc->bits | (uint64_t)AV_RB32(bc->ptr) << (32 - bc->bits_left);
                ^
        69. #endif
        70.     bc->ptr       += 4;
