libavcodec/wmv2.c:97: error: Buffer Overrun L1
  Offset: [29, 36] (⇐ [5, 12] + 24) Size: 6 by call to `wmv2_add_block`.

libavcodec/wmv2.c:97:5: Call
95. 
96.     wmv2_add_block(w, block1[4], dest_cb, s->uvlinesize, 4);
97.     wmv2_add_block(w, block1[5], dest_cr, s->uvlinesize, 5);
        ^
98. }
99. 

libavcodec/wmv2.c:57:1: Parameter `n`
  55. }
  56. 
  57. static void wmv2_add_block(Wmv2Context *w, int16_t *block1,
      ^
  58.                            uint8_t *dst, int stride, int n)
  59. {

libavcodec/wmv2.c:69:13: Call
  67.         case 1:
  68.             ff_simple_idct84_add(dst, stride, block1);
  69.             ff_simple_idct84_add(dst + 4 * stride, stride, w->abt_block2[n]);
                  ^
  70.             s->bdsp.clear_block(w->abt_block2[n]);
  71.             break;

libavcodec/simple_idct.c:176:1: Parameter `*block`
    174. }
    175. 
    176. void ff_simple_idct84_add(uint8_t *dest, ptrdiff_t line_size, int16_t *block)
         ^
    177. {
    178.     int i;

libavcodec/simple_idct.c:187:9: Call
    185.     /* IDCT4 and store */
    186.     for(i=0;i<8;i++) {
    187.         idct4col_add(dest + i, line_size, block + i);
                 ^
    188.     }
    189. }

libavcodec/simple_idct.c:131:1: <Length trace>
129. #define C3 C_FIX(0.5)
130. #define C_SHIFT (4+1+12)
131. static inline void idct4col_add(uint8_t *dest, ptrdiff_t line_size, const int16_t *col)
     ^
132. {
133.     int c0, c1, c2, c3, a0, a1, a2, a3;

libavcodec/simple_idct.c:131:1: Parameter `*col`
      129. #define C3 C_FIX(0.5)
      130. #define C_SHIFT (4+1+12)
      131. static inline void idct4col_add(uint8_t *dest, ptrdiff_t line_size, const int16_t *col)
           ^
      132. {
      133.     int c0, c1, c2, c3, a0, a1, a2, a3;

libavcodec/simple_idct.c:138:10: Array access: Offset: [29, 36] (⇐ [5, 12] + 24) Size: 6 by call to `wmv2_add_block` 
      136.     a1 = col[8*1];
      137.     a2 = col[8*2];
      138.     a3 = col[8*3];
                    ^
      139.     c0 = (a0 + a2)*C3 + (1 << (C_SHIFT - 1));
      140.     c2 = (a0 - a2)*C3 + (1 << (C_SHIFT - 1));

static inline void idct4col_add(uint8_t *dest, ptrdiff_t line_size, const int16_t *col)
{
    int c0, c1, c2, c3, a0, a1, a2, a3;
    a0 = col[8*0];
    a1 = col[8*1];
    a2 = col[8*2];
    a3 = col[8*3];
    c0 = (a0 + a2)*C3 + (1 << (C_SHIFT - 1));
    c2 = (a0 - a2)*C3 + (1 << (C_SHIFT - 1));
    c1 = a1 * C1 + a3 * C2;
    c3 = a1 * C2 - a3 * C1;
    dest[0] = av_clip_uint8(dest[0] + ((c0 + c1) >> C_SHIFT));
    dest += line_size;
    dest[0] = av_clip_uint8(dest[0] + ((c2 + c3) >> C_SHIFT));
    dest += line_size;
    dest[0] = av_clip_uint8(dest[0] + ((c2 - c3) >> C_SHIFT));
    dest += line_size;
    dest[0] = av_clip_uint8(dest[0] + ((c0 - c1) >> C_SHIFT));
}
['void ff_wmv2_add_mb(MpegEncContext *s, int16_t block1[6][64],\n                    uint8_t *dest_y, uint8_t *dest_cb, uint8_t *dest_cr)\n{\n    Wmv2Context *const w = (Wmv2Context *) s;\n    wmv2_add_block(w, block1[0], dest_y,                       s->linesize, 0);\n    wmv2_add_block(w, block1[1], dest_y + 8,                   s->linesize, 1);\n    wmv2_add_block(w, block1[2], dest_y + 8 * s->linesize,     s->linesize, 2);\n    wmv2_add_block(w, block1[3], dest_y + 8 + 8 * s->linesize, s->linesize, 3);\n    if (s->avctx->flags & AV_CODEC_FLAG_GRAY)\n        return;\n    wmv2_add_block(w, block1[4], dest_cb, s->uvlinesize, 4);\n    wmv2_add_block(w, block1[5], dest_cr, s->uvlinesize, 5);\n}', 'static void wmv2_add_block(Wmv2Context *w, int16_t *block1,\n                           uint8_t *dst, int stride, int n)\n{\n    MpegEncContext *const s = &w->s;\n    if (s->block_last_index[n] >= 0) {\n        switch (w->abt_type_table[n]) {\n        case 0:\n            w->wdsp.idct_add(dst, stride, block1);\n            break;\n        case 1:\n            ff_simple_idct84_add(dst, stride, block1);\n            ff_simple_idct84_add(dst + 4 * stride, stride, w->abt_block2[n]);\n            s->bdsp.clear_block(w->abt_block2[n]);\n            break;\n        case 2:\n            ff_simple_idct48_add(dst, stride, block1);\n            ff_simple_idct48_add(dst + 4, stride, w->abt_block2[n]);\n            s->bdsp.clear_block(w->abt_block2[n]);\n            break;\n        default:\n            av_log(s->avctx, AV_LOG_ERROR, "internal error in WMV2 abt\\n");\n        }\n    }\n}', 'void ff_simple_idct84_add(uint8_t *dest, ptrdiff_t line_size, int16_t *block)\n{\n    int i;\n    for(i=0; i<4; i++) {\n        idctRowCondDC_8(block + i*8, 0);\n    }\n    for(i=0;i<8;i++) {\n        idct4col_add(dest + i, line_size, block + i);\n    }\n}', 'static inline void idct4col_add(uint8_t *dest, ptrdiff_t line_size, const int16_t *col)\n{\n    int c0, c1, c2, c3, a0, a1, a2, a3;\n    a0 = col[8*0];\n    a1 = col[8*1];\n    a2 = col[8*2];\n    a3 = col[8*3];\n    c0 = (a0 + a2)*C3 + (1 << (C_SHIFT - 1));\n    c2 = (a0 - a2)*C3 + (1 << (C_SHIFT - 1));\n    c1 = a1 * C1 + a3 * C2;\n    c3 = a1 * C2 - a3 * C1;\n    dest[0] = av_clip_uint8(dest[0] + ((c0 + c1) >> C_SHIFT));\n    dest += line_size;\n    dest[0] = av_clip_uint8(dest[0] + ((c2 + c3) >> C_SHIFT));\n    dest += line_size;\n    dest[0] = av_clip_uint8(dest[0] + ((c2 - c3) >> C_SHIFT));\n    dest += line_size;\n    dest[0] = av_clip_uint8(dest[0] + ((c0 - c1) >> C_SHIFT));\n}']