libavcodec/dxtory.c:105: error: Buffer Overrun L2
  Offset: [2, 9] (⇐ 2 + [0, 7]) Size: 3 by call to `decode_sym`.

libavcodec/dxtory.c:88:1: Array declaration
86. }
87. 
88. static int dx2_decode_slice(GetBitContext *gb, int width, int height,
    ^
89.                             uint8_t *Y, uint8_t *U, uint8_t *V,
90.                             int ystride, int ustride, int vstride)

libavcodec/dxtory.c:105:25: Call
103.             Y[x + 1 + 1 * ystride] = decode_sym(gb, lru[0]);
104.             U[x >> 1] = decode_sym(gb, lru[1]) ^ 0x80;
105.             V[x >> 1] = decode_sym(gb, lru[2]) ^ 0x80;
                             ^
106.         }
107. 

libavcodec/dxtory.c:75:9: <Offset trace>
73.     uint8_t c, val;
74. 
75.     c = get_unary(gb, 0, 8);
            ^
76.     if (!c) {
77.         val = get_bits(gb, 8);

libavcodec/dxtory.c:75:9: Call
  73.     uint8_t c, val;
  74. 
  75.     c = get_unary(gb, 0, 8);
              ^
  76.     if (!c) {
  77.         val = get_bits(gb, 8);

libavcodec/unary.h:33:1: Parameter `len`
    31.  * @return Unary length/index
    32.  */
    33. static inline int get_unary(GetBitContext *gb, int stop, int len)
        ^
    34. {
    35.     int i;

libavcodec/unary.h:38:5: Assignment
    36. 
    37.     for(i = 0; i < len && get_bits1(gb) != stop; i++);
    38.     return i;
            ^
    39. }
    40. 

libavcodec/dxtory.c:75:5: Assignment
  73.     uint8_t c, val;
  74. 
  75.     c = get_unary(gb, 0, 8);
          ^
  76.     if (!c) {
  77.         val = get_bits(gb, 8);

libavcodec/dxtory.c:71:1: <Length trace>
69. const uint8_t def_lru[8] = { 0x00, 0x20, 0x40, 0x60, 0x80, 0xA0, 0xC0, 0xFF };
70. 
71. static inline uint8_t decode_sym(GetBitContext *gb, uint8_t lru[8])
    ^
72. {
73.     uint8_t c, val;

libavcodec/dxtory.c:71:1: Parameter `*lru`
  69. const uint8_t def_lru[8] = { 0x00, 0x20, 0x40, 0x60, 0x80, 0xA0, 0xC0, 0xFF };
  70. 
  71. static inline uint8_t decode_sym(GetBitContext *gb, uint8_t lru[8])
      ^
  72. {
  73.     uint8_t c, val;

libavcodec/dxtory.c:80:15: Array access: Offset: [2, 9] (⇐ 2 + [0, 7]) Size: 3 by call to `decode_sym` 
  78.         memmove(lru + 1, lru, sizeof(*lru) * (8 - 1));
  79.     } else {
  80.         val = lru[c - 1];
                    ^
  81.         memmove(lru + 1, lru, sizeof(*lru) * (c - 1));
  82.     }

static inline uint8_t decode_sym(GetBitContext *gb, uint8_t lru[8])
{
    uint8_t c, val;
    c = get_unary(gb, 0, 8);
    if (!c) {
        val = get_bits(gb, 8);
        memmove(lru + 1, lru, sizeof(*lru) * (8 - 1));
    } else {
        val = lru[c - 1];
        memmove(lru + 1, lru, sizeof(*lru) * (c - 1));
    }
    lru[0] = val;
    return val;
}
['static int dx2_decode_slice(GetBitContext *gb, int width, int height,\n                            uint8_t *Y, uint8_t *U, uint8_t *V,\n                            int ystride, int ustride, int vstride)\n{\n    int x, y, i;\n    uint8_t lru[3][8];\n    for (i = 0; i < 3; i++)\n        memcpy(lru[i], def_lru, 8 * sizeof(*def_lru));\n    for (y = 0; y < height; y+=2) {\n        for (x = 0; x < width; x += 2) {\n            Y[x + 0 + 0 * ystride] = decode_sym(gb, lru[0]);\n            Y[x + 1 + 0 * ystride] = decode_sym(gb, lru[0]);\n            Y[x + 0 + 1 * ystride] = decode_sym(gb, lru[0]);\n            Y[x + 1 + 1 * ystride] = decode_sym(gb, lru[0]);\n            U[x >> 1] = decode_sym(gb, lru[1]) ^ 0x80;\n            V[x >> 1] = decode_sym(gb, lru[2]) ^ 0x80;\n        }\n        Y += ystride << 1;\n        U += ustride;\n        V += vstride;\n    }\n    return 0;\n}', 'static inline uint8_t decode_sym(GetBitContext *gb, uint8_t lru[8])\n{\n    uint8_t c, val;\n    c = get_unary(gb, 0, 8);\n    if (!c) {\n        val = get_bits(gb, 8);\n        memmove(lru + 1, lru, sizeof(*lru) * (8 - 1));\n    } else {\n        val = lru[c - 1];\n        memmove(lru + 1, lru, sizeof(*lru) * (c - 1));\n    }\n    lru[0] = val;\n    return val;\n}', 'static inline int get_unary(GetBitContext *gb, int stop, int len)\n{\n    int i;\n    for(i = 0; i < len && get_bits1(gb) != stop; i++);\n    return i;\n}']