libavcodec/nellymoserdec.c:74: error: Integer Overflow L2
  (32 - [0, max(64, `s->bc.bits_left`)]):unsigned32 by call to `bitstream_read`.

libavcodec/nellymoserdec.c:60:1: Parameter `s->bc.bits_left`
58. } NellyMoserDecodeContext;
59. 
60. static void nelly_decode_block(NellyMoserDecodeContext *s,
    ^
61.                                const unsigned char block[NELLY_BLOCK_LEN],
62.                                float audio[NELLY_SAMPLES])

libavcodec/nellymoserdec.c:70:5: Call
68.     unsigned char v;
69. 
70.     bitstream_init8(&s->bc, block, NELLY_BLOCK_LEN);
        ^
71. 
72.     bptr = buf;

libavcodec/bitstream.h:104:1: Parameter `bc->bits_left`
  102. 
  103. /* Initialize BitstreamContext with buffer size in bytes instead of bits. */
  104. static inline int bitstream_init8(BitstreamContext *bc, const uint8_t *buffer,
       ^
  105.                                   unsigned byte_size)
  106. {

libavcodec/nellymoserdec.c:74:31: Call
72.     bptr = buf;
73.     pptr = pows;
74.     val = ff_nelly_init_table[bitstream_read(&s->bc, 6)];
                                  ^
75.     for (i=0 ; i<NELLY_BANDS ; i++) {
76.         if (i > 0)

libavcodec/bitstream.h:183:1: Parameter `n`
  181. 
  182. /* Return n bits from the buffer. n has to be in the 0-32 range. */
  183. static inline uint32_t bitstream_read(BitstreamContext *bc, unsigned n)
       ^
  184. {
  185.     if (!n)

libavcodec/bitstream.h:189:9: Call
  187. 
  188.     if (n > bc->bits_left) {
  189.         refill_32(bc);
               ^
  190.         if (bc->bits_left < 32)
  191.             bc->bits_left = n;

libavcodec/bitstream.h:60:1: <RHS trace>
58. }
59. 
60. static inline void refill_32(BitstreamContext *bc)
    ^
61. {
62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:60:1: Parameter `bc->bits_left`
    58. }
    59. 
    60. static inline void refill_32(BitstreamContext *bc)
        ^
    61. {
    62.     if (bc->ptr >= bc->buffer_end)

libavcodec/bitstream.h:68:5: Binary operation: (32 - [0, max(64, s->bc.bits_left)]):unsigned32 by call to `bitstream_read` 
    66.     bc->bits       = (uint64_t)AV_RL32(bc->ptr) << bc->bits_left | bc->bits;
    67. #else
    68.     bc->bits       = bc->bits | (uint64_t)AV_RB32(bc->ptr) << (32 - bc->bits_left);
            ^
    69. #endif
    70.     bc->ptr       += 4;
