libavcodec/wmaprodec.c:1325: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `decode_tilehdr`.

libavcodec/wmaprodec.c:1310:1: Parameter `s->bc.bits_left`
1308.  *        1 if there are additional frames
1309.  */
1310. static int decode_frame(WMAProDecodeCtx *s, AVFrame *frame, int *got_frame_ptr)
      ^
1311. {
1312.     AVCodecContext *avctx = s->avctx;

libavcodec/wmaprodec.c:1325:9: Call
1323. 
1324.     /** decode tile information */
1325.     if (decode_tilehdr(s)) {
              ^
1326.         s->packet_loss = 1;
1327.         return 0;

libavcodec/wmaprodec.c:537:1: Parameter `s->bc.bits_left`
  535.  *@return 0 on success, < 0 in case of an error
  536.  */
  537. static int decode_tilehdr(WMAProDecodeCtx *s)
       ^
  538. {
  539.     uint16_t num_samples[WMAPRO_MAX_CHANNELS] = { 0 };/**< sum of samples for all currently known subframes of a channel */

libavcodec/wmaprodec.c:556:38: Call
  554.         s->channel[c].num_subframes = 0;
  555. 
  556.     if (s->max_num_subframes == 1 || bitstream_read_bit(&s->bc))
                                            ^
  557.         fixed_channel_layout = 1;
  558. 

libavcodec/bitstream.h:145:1: Parameter `bc->bits_left`
    143. 
    144. /* Return one bit from the buffer. */
    145. static inline unsigned bitstream_read_bit(BitstreamContext *bc)
         ^
    146. {
    147.     if (!bc->bits_left)

libavcodec/bitstream.h:150:12: Call
    148.         refill_64(bc);
    149. 
    150.     return get_val(bc, 1);
                    ^
    151. }
    152. 

libavcodec/bitstream.h:130:1: <LHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `bc->bits_left`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: <RHS trace>
128. }
129. 
130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
     ^
131. {
132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:130:1: Parameter `n`
      128. }
      129. 
      130. static inline uint64_t get_val(BitstreamContext *bc, unsigned n)
           ^
      131. {
      132. #ifdef BITSTREAM_READER_LE

libavcodec/bitstream.h:139:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `decode_tilehdr` 
      137.     bc->bits <<= n;
      138. #endif
      139.     bc->bits_left -= n;
               ^
      140. 
      141.     return ret;
