libavcodec/svq3.c:1046: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb`.

libavcodec/svq3.c:1046:17: Call
1044. 
1045.             if (mb_type != 0) {
1046.                 ff_h264_hl_decode_mb (h);
                      ^
1047.             }
1048. 

libavcodec/h264.c:1847:1: Parameter `h->list_count`
  1845. }
  1846. 
  1847. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  1848.     MpegEncContext * const s = &h->s;
  1849.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:1854:9: Call
  1852. 
  1853.     if (is_complex) {
  1854.         hl_decode_mb_complex(h);
                ^
  1855.     } else if (h->pixel_shift) {
  1856.         hl_decode_mb_simple_16(h);

libavcodec/h264.c:1843:1: Parameter `h->list_count`
    1841.  * Process a macroblock; this handles edge cases, such as interlacing.
    1842.  */
    1843. static void av_noinline hl_decode_mb_complex(H264Context *h){
          ^
    1844.     hl_decode_mb_internal(h, 0, h->pixel_shift);
    1845. }

libavcodec/h264.c:1844:5: Call
    1842.  */
    1843. static void av_noinline hl_decode_mb_complex(H264Context *h){
    1844.     hl_decode_mb_internal(h, 0, h->pixel_shift);
              ^
    1845. }
    1846. 

libavcodec/h264.c:1541:1: Parameter `h->list_count`
      1539. }
      1540. 
      1541. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple, int pixel_shift){
            ^
      1542.     MpegEncContext * const s = &h->s;
      1543.     const int mb_x= s->mb_x;

libavcodec/svq3.c:1046:17: Call
1044. 
1045.             if (mb_type != 0) {
1046.                 ff_h264_hl_decode_mb (h);
                      ^
1047.             }
1048. 

libavcodec/h264.c:1847:1: Parameter `h->list_count`
  1845. }
  1846. 
  1847. void ff_h264_hl_decode_mb(H264Context *h){
        ^
  1848.     MpegEncContext * const s = &h->s;
  1849.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:1854:9: Call
  1852. 
  1853.     if (is_complex) {
  1854.         hl_decode_mb_complex(h);
                ^
  1855.     } else if (h->pixel_shift) {
  1856.         hl_decode_mb_simple_16(h);

libavcodec/h264.c:1843:1: Parameter `h->list_count`
    1841.  * Process a macroblock; this handles edge cases, such as interlacing.
    1842.  */
    1843. static void av_noinline hl_decode_mb_complex(H264Context *h){
          ^
    1844.     hl_decode_mb_internal(h, 0, h->pixel_shift);
    1845. }

libavcodec/h264.c:1844:5: Call
    1842.  */
    1843. static void av_noinline hl_decode_mb_complex(H264Context *h){
    1844.     hl_decode_mb_internal(h, 0, h->pixel_shift);
              ^
    1845. }
    1846. 

libavcodec/h264.c:1541:1: Parameter `h->list_count`
      1539. }
      1540. 
      1541. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple, int pixel_shift){
            ^
      1542.     MpegEncContext * const s = &h->s;
      1543.     const int mb_x= s->mb_x;

libavcodec/h264.c:1735:17: Call
      1733.         }else if(is_h264){
      1734.             if (pixel_shift) {
      1735.                 hl_motion_16(h, dest_y, dest_cb, dest_cr,
                            ^
      1736.                              s->me.qpel_put, s->dsp.put_h264_chroma_pixels_tab,
      1737.                              s->me.qpel_avg, s->dsp.avg_h264_chroma_pixels_tab,

libavcodec/h264.c:762:1: Parameter `h->list_count`
        760. }
        761. hl_motion_fn(0, 8);
        762. hl_motion_fn(1, 16);
             ^
        763. 
        764. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:762:1: Call
        760. }
        761. hl_motion_fn(0, 8);
        762. hl_motion_fn(1, 16);
             ^
        763. 
        764. static void free_tables(H264Context *h, int free_rbsp){

libavcodec/h264.c:646:1: Parameter `h->list_count`
          644. }
          645. 
          646. static av_always_inline void hl_motion(H264Context *h, uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr,
               ^
          647.                       qpel_mc_func (*qpix_put)[16], h264_chroma_mc_func (*chroma_put),
          648.                       qpel_mc_func (*qpix_avg)[16], h264_chroma_mc_func (*chroma_avg),

libavcodec/h264.c:658:9: Call
          656. 
          657.     if(HAVE_PTHREADS && (s->avctx->active_thread_type & FF_THREAD_FRAME))
          658.         await_references(h);
                       ^
          659.     prefetch_motion(h, 0, pixel_shift);
          660. 

libavcodec/h264.c:299:1: <LHS trace>
297.  * @param h the H264 context
298.  */
299. static void await_references(H264Context *h){
     ^
300.     MpegEncContext * const s = &h->s;
301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:299:1: Parameter `h->list_count`
            297.  * @param h the H264 context
            298.  */
            299. static void await_references(H264Context *h){
                 ^
            300.     MpegEncContext * const s = &h->s;
            301.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:357:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_h264_hl_decode_mb` 
            355.     }
            356. 
            357.     for(list=h->list_count-1; list>=0; list--){
                         ^
            358.         for(ref=0; ref<48 && nrefs[list]; ref++){
            359.             int row = refs[list][ref];
