libavcodec/lagarith.c:391: error: Integer Overflow L2
  ([0, +oo] - 8):unsigned32 by call to `ff_lag_rac_init`.

libavcodec/lagarith.c:388:13: Call
386.         init_get_bits(&gb, src + offset, src_size * 8);
387. 
388.         if (lag_read_prob_header(&rac, &gb) < 0)
                 ^
389.             return -1;
390. 

libavcodec/lagarith.c:135:1: Parameter `rac->scale`
  133. }
  134. 
  135. static int lag_read_prob_header(lag_rac *rac, GetBitContext *gb)
       ^
  136. {
  137.     int i, j, scale_factor;

libavcodec/lagarith.c:391:9: Call
389.             return -1;
390. 
391.         ff_lag_rac_init(&rac, &gb, length - stride);
             ^
392. 
393.         for (i = 0; i < height; i++)

libavcodec/lagarithrac.c:33:1: <LHS trace>
31. #include "lagarithrac.h"
32. 
33. void ff_lag_rac_init(lag_rac *l, GetBitContext *gb, int length)
    ^
34. {
35.     int i, j, left;

libavcodec/lagarithrac.c:33:1: Parameter `l->scale`
  31. #include "lagarithrac.h"
  32. 
  33. void ff_lag_rac_init(lag_rac *l, GetBitContext *gb, int length)
      ^
  34. {
  35.     int i, j, left;

libavcodec/lagarithrac.c:48:23: Binary operation: ([0, +oo] - 8):unsigned32 by call to `ff_lag_rac_init` 
  46.     l->range        = 0x80;
  47.     l->low          = *l->bytestream >> 1;
  48.     l->hash_shift   = FFMAX(l->scale - 8, 0);
                            ^
  49. 
  50.     for (i = j = 0; i < 256; i++) {
