libavcodec/h264.c:3873: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `field_end`.

libavcodec/h264.c:3853:15: Call
3851.     }
3852. 
3853.     buf_index=decode_nal_units(h, buf, buf_size);
                    ^
3854.     if(buf_index < 0)
3855.         return -1;

libavcodec/h264.c:3547:1: Parameter `h->s.list_count`
  3545. 
  3546. 
  3547. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size){
        ^
  3548.     MpegEncContext * const s = &h->s;
  3549.     AVCodecContext * const avctx= s->avctx;

libavcodec/h264.c:3873:9: Call
3871.         if(s->flags2 & CODEC_FLAG2_CHUNKS) decode_postinit(h, 1);
3872. 
3873.         field_end(h, 0);
              ^
3874. 
3875.         if (!h->next_output_pic) {

libavcodec/h264.c:2356:1: Parameter `h->s.list_count`
  2354. }
  2355. 
  2356. static int field_end(H264Context *h, int in_setup){
        ^
  2357.     MpegEncContext * const s = &h->s;
  2358.     AVCodecContext * const avctx= s->avctx;

libavcodec/h264.c:2401:9: Call
  2399.      */
  2400.     if (!FIELD_PICTURE)
  2401.         ff_er_frame_end(s);
                ^
  2402. 
  2403.     MPV_frame_end(s);

libavcodec/error_resilience.c:781:1: Parameter `s->list_count`
    779. }
    780. 
    781. void ff_er_frame_end(MpegEncContext *s){
         ^
    782.     int i, mb_x, mb_y, error, error_type, dc_error, mv_error, ac_error;
    783.     int distance;

libavcodec/error_resilience.c:944:22: Call
    942.     av_log(s->avctx, AV_LOG_INFO, "concealing %d DC, %d AC, %d MV errors\n", dc_error, ac_error, mv_error);
    943. 
    944.     is_intra_likely= is_intra_more_likely(s);
                              ^
    945. 
    946.     /* set unknown mb-type to most likely */

libavcodec/error_resilience.c:640:1: Parameter `s->list_count`
      638. }
      639. 
      640. static int is_intra_more_likely(MpegEncContext *s){
           ^
      641.     int is_intra_likely, i, j, undamaged_count, skip_amount, mb_x, mb_y;
      642. 

libavcodec/error_resilience.c:1000:13: Call
     998.             s->mb_x= mb_x;
     999.             s->mb_y= mb_y;
    1000.             decode_mb(s, 0/*FIXME h264 partitioned slices need this set*/);
                      ^
    1001.         }
    1002.     }

libavcodec/error_resilience.c:43:1: Parameter `s->list_count`
      41. #undef mb_intra
      42. 
      43. static void decode_mb(MpegEncContext *s, int ref){
          ^
      44.     s->dest[0] = s->current_picture.f.data[0] + (s->mb_y *  16 * s->linesize)                         + s->mb_x *  16;
      45.     s->dest[1] = s->current_picture.f.data[1] + (s->mb_y * (16 >> s->chroma_y_shift) * s->uvlinesize) + s->mb_x * (16 >> s->chroma_x_shift);

libavcodec/error_resilience.c:59:9: Call
      57.         fill_rectangle(h->mv_cache[0][ scan8[0] ], 4, 4, 8, pack16to32(s->mv[0][0][0],s->mv[0][0][1]), 4);
      58.         assert(!FRAME_MBAFF);
      59.         ff_h264_hl_decode_mb(h);
                  ^
      60.     }else{
      61.         assert(ref==0);

libavcodec/h264.c:2066:1: Parameter `h->list_count`
        2064. }
        2065. 
        2066. void ff_h264_hl_decode_mb(H264Context *h){
              ^
        2067.     MpegEncContext * const s = &h->s;
        2068.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2074:13: Call
        2072.     if (CHROMA444) {
        2073.         if(is_complex || h->pixel_shift)
        2074.             hl_decode_mb_444_complex(h);
                          ^
        2075.         else
        2076.             hl_decode_mb_444_simple(h);

libavcodec/h264.c:2058:1: Parameter `h->list_count`
          2056. }
          2057. 
          2058. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
                ^
          2059.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
          2060. }

libavcodec/h264.c:2059:5: Call
          2057. 
          2058. static void av_noinline hl_decode_mb_444_complex(H264Context *h){
          2059.     hl_decode_mb_444_internal(h, 0, h->pixel_shift);
                    ^
          2060. }
          2061. 

libavcodec/h264.c:1945:1: Parameter `h->list_count`
            1943. }
            1944. 
            1945. static av_always_inline void hl_decode_mb_444_internal(H264Context *h, int simple, int pixel_shift){
                  ^
            1946.     MpegEncContext * const s = &h->s;
            1947.     const int mb_x= s->mb_x;

libavcodec/h264.c:2024:13: Call
            2022.                 xchg_mb_border(h, dest[0], dest[1], dest[2], linesize, linesize, 0, 1, simple, pixel_shift);
            2023.         }else{
            2024.             hl_motion(h, dest[0], dest[1], dest[2],
                              ^
            2025.                       s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
            2026.                       s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:680:1: Parameter `h->list_count`
              678. }
              679. 
              680. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
                   ^
              681.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
              682.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:692:9: Call
              690. 
              691.     if(HAVE_PTHREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
              692.         await_references(h);
                           ^
              693.     prefetch_motion(h, 0, pixel_shift, chroma444);
              694. 

libavcodec/h264.c:290:1: <LHS trace>
288.  * @param h the H264 context
289.  */
290. static void await_references(H264Context *h){
     ^
291.     MpegEncContext * const s = &h->s;
292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:290:1: Parameter `h->list_count`
                288.  * @param h the H264 context
                289.  */
                290. static void await_references(H264Context *h){
                     ^
                291.     MpegEncContext * const s = &h->s;
                292.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:348:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `field_end` 
                346.     }
                347. 
                348.     for(list=h->list_count-1; list>=0; list--){
                             ^
                349.         for(ref=0; ref<48 && nrefs[list]; ref++){
                350.             int row = refs[list][ref];
