439     unsigned int bitstream_size, bytestream_size, wordstream_size, extra,  in decode_p_frame()  local
449         bitstream_size  = AV_RL32(buf + 8);  in decode_p_frame()
454         bitstream_size  = AV_RL16(buf - 4);  in decode_p_frame()
456         bytestream_size = FFMAX(length - bitstream_size - wordstream_size, 0);  in decode_p_frame()
459     if (bitstream_size > length || bitstream_size >= INT_MAX/8 ||  in decode_p_frame()
460         bytestream_size > length - bitstream_size ||  in decode_p_frame()
461         wordstream_size > length - bytestream_size - bitstream_size ||  in decode_p_frame()
462         extra > length - bytestream_size - bitstream_size - wordstream_size) {  in decode_p_frame()
463 …av_log(f->avctx, AV_LOG_ERROR, "lengths %d %d %d %d\n", bitstream_size, bytestream_size, wordstrea…  in decode_p_frame()
464         bitstream_size+ bytestream_size+ wordstream_size - length);  in decode_p_frame()
469                           bitstream_size);  in decode_p_frame()
473                        bitstream_size / 4);  in decode_p_frame()
474     init_get_bits(&f->gb, f->bitstream_buffer, 8 * bitstream_size);  in decode_p_frame()
476     wordstream_offset = extra + bitstream_size;  in decode_p_frame()
477     bytestream_offset = extra + bitstream_size + wordstream_size;  in decode_p_frame()
778     const unsigned int bitstream_size = AV_RL32(buf);  in decode_i_frame()  local
782     if (bitstream_size > (1 << 26))  in decode_i_frame()
785     if (length < bitstream_size + 12) {  in decode_i_frame()
790     prestream_size = 4 * AV_RL32(buf + bitstream_size + 4);  in decode_i_frame()
791     prestream      =             buf + bitstream_size + 12;  in decode_i_frame()
793     if (prestream_size + bitstream_size + 12 != length  in decode_i_frame()
796                prestream_size, bitstream_size, length);  in decode_i_frame()
808     init_get_bits(&f->gb, buf + 4, 8 * bitstream_size);  in decode_i_frame()