libavformat/asfdec.c:296: error: Integer Overflow L2
  (2 × [`len`, min(2147483646, `len`)]):signed32.

libavformat/asfdec.c:284:1: <RHS trace>
282. }
283. 
284. static void get_tag(AVFormatContext *s, const char *key, int type, int len, int type2_size)
     ^
285. {
286.     ASFContext *asf = s->priv_data;

libavformat/asfdec.c:284:1: Parameter `len`
282. }
283. 
284. static void get_tag(AVFormatContext *s, const char *key, int type, int len, int type2_size)
     ^
285. {
286.     ASFContext *asf = s->priv_data;

libavformat/asfdec.c:296:13: Binary operation: (2 × [len, min(2147483646, len)]):signed32
294.         goto finish;
295. 
296.     value = av_malloc(2 * len + 1);
                 ^
297.     if (!value)
298.         goto finish;
