libavcodec/cavsdec.c:1188: error: Integer Overflow L2
  ([0, 64] - 1):unsigned32 by call to `decode_slice_header`.

libavcodec/cavsdec.c:1187:17: Call
1185.         default:
1186.             if (stc <= SLICE_MAX_START_CODE) {
1187.                 bitstream_init(&h->bc, buf_ptr, input_size);
                      ^
1188.                 decode_slice_header(h, &h->bc);
1189.             }

libavcodec/bitstream.h:85:9: Assignment
  83.         bc->buffer    =
  84.         bc->ptr       = NULL;
  85.         bc->bits_left = 0;
              ^
  86.         return AVERROR_INVALIDDATA;
  87.     }

libavcodec/cavsdec.c:1188:17: Call
1186.             if (stc <= SLICE_MAX_START_CODE) {
1187.                 bitstream_init(&h->bc, buf_ptr, input_size);
1188.                 decode_slice_header(h, &h->bc);
                      ^
1189.             }
1190.             break;

libavcodec/cavsdec.c:877:1: Parameter `bc->bits_left`
  875.  ****************************************************************************/
  876. 
  877. static inline int decode_slice_header(AVSContext *h, BitstreamContext *bc)
       ^
  878. {
  879.     if (h->stc > 0xAF)

libavcodec/cavsdec.c:887:23: Call
  885.     h->flags &= ~(B_AVAIL | C_AVAIL);
  886.     if ((h->mby == 0) && (!h->qp_fixed)) {
  887.         h->qp_fixed = bitstream_read_bit(bc);
                             ^
  888.         h->qp       = bitstream_read(bc, 6);
  889.     }

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
    143. 
    144. /* Return one bit from the buffer. */
    145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    146. {
    147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
    148.         refill_64(bc);
    149. 
    150.     return get_val(bc, 1);
                    ^
    151. }
    152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([0, 64] - 1):unsigned32 by call to `decode_slice_header` 
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;
