Using ubsan and afl, I found the following errors:
runtime error: left shift of 1 by 31 places cannot be represented in type 'int'
runtime error: signed integer overflow: -2147483648 - 1 cannot be represented in type 'int'
See #1442 for code to reproduce it.