libavcodec/snow.c:364: error: Buffer Overrun L2
  Offset: [0, 18] Size: 16.

libavcodec/snow.c:290:1: <Offset trace>
288. }
289. 
290. void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){
     ^
291.     if(block->type & BLOCK_INTRA){
292.         int x, y;

libavcodec/snow.c:290:1: Parameter `s->mv_scale`
288. }
289. 
290. void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){
     ^
291.     if(block->type & BLOCK_INTRA){
292.         int x, y;

libavcodec/snow.c:331:26: Assignment
329.     }else{
330.         uint8_t *src= s->last_picture[block->ref].data[plane_index];
331.         const int scale= plane_index ?  s->mv_scale : 2*s->mv_scale;
                              ^
332.         int mx= block->mx*scale;
333.         int my= block->my*scale;

libavcodec/snow.c:331:9: Assignment
329.     }else{
330.         uint8_t *src= s->last_picture[block->ref].data[plane_index];
331.         const int scale= plane_index ?  s->mv_scale : 2*s->mv_scale;
             ^
332.         int mx= block->mx*scale;
333.         int my= block->my*scale;

libavcodec/snow.c:332:9: Assignment
330.         uint8_t *src= s->last_picture[block->ref].data[plane_index];
331.         const int scale= plane_index ?  s->mv_scale : 2*s->mv_scale;
332.         int mx= block->mx*scale;
             ^
333.         int my= block->my*scale;
334.         const int dx= mx&15;

libavcodec/snow.c:334:9: Assignment
332.         int mx= block->mx*scale;
333.         int my= block->my*scale;
334.         const int dx= mx&15;
             ^
335.         const int dy= my&15;
336.         const int tab_index= 3 - (b_w>>2) + (b_w>>4);

libavcodec/snow.c:290:1: <Length trace>
288. }
289. 
290. void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){
     ^
291.     if(block->type & BLOCK_INTRA){
292.         int x, y;

libavcodec/snow.c:290:1: Parameter `s->dsp.put_h264_qpel_pixels_tab[*][*]`
288. }
289. 
290. void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){
     ^
291.     if(block->type & BLOCK_INTRA){
292.         int x, y;

libavcodec/snow.c:364:13: Array access: Offset: [0, 18] Size: 16
362.         }else{
363.             assert(2*b_w==b_h);
364.             s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst           ,src + 3 + 3*stride           ,stride);
                 ^
365.             s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst+b_w*stride,src + 3 + 3*stride+b_w*stride,stride);
366.         }

void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){
    if(block->type & BLOCK_INTRA){
        int x, y;
        const int color = block->color[plane_index];
        const int color4= color*0x01010101;
        if(b_w==32){
            for(y=0; y < b_h; y++){
                *(uint32_t*)&dst[0 + y*stride]= color4;
                *(uint32_t*)&dst[4 + y*stride]= color4;
                *(uint32_t*)&dst[8 + y*stride]= color4;
                *(uint32_t*)&dst[12+ y*stride]= color4;
                *(uint32_t*)&dst[16+ y*stride]= color4;
                *(uint32_t*)&dst[20+ y*stride]= color4;
                *(uint32_t*)&dst[24+ y*stride]= color4;
                *(uint32_t*)&dst[28+ y*stride]= color4;
            }
        }else if(b_w==16){
            for(y=0; y < b_h; y++){
                *(uint32_t*)&dst[0 + y*stride]= color4;
                *(uint32_t*)&dst[4 + y*stride]= color4;
                *(uint32_t*)&dst[8 + y*stride]= color4;
                *(uint32_t*)&dst[12+ y*stride]= color4;
            }
        }else if(b_w==8){
            for(y=0; y < b_h; y++){
                *(uint32_t*)&dst[0 + y*stride]= color4;
                *(uint32_t*)&dst[4 + y*stride]= color4;
            }
        }else if(b_w==4){
            for(y=0; y < b_h; y++){
                *(uint32_t*)&dst[0 + y*stride]= color4;
            }
        }else{
            for(y=0; y < b_h; y++){
                for(x=0; x < b_w; x++){
                    dst[x + y*stride]= color;
                }
            }
        }
    }else{
        uint8_t *src= s->last_picture[block->ref].data[plane_index];
        const int scale= plane_index ?  s->mv_scale : 2*s->mv_scale;
        int mx= block->mx*scale;
        int my= block->my*scale;
        const int dx= mx&15;
        const int dy= my&15;
        const int tab_index= 3 - (b_w>>2) + (b_w>>4);
        sx += (mx>>4) - (HTAPS_MAX/2-1);
        sy += (my>>4) - (HTAPS_MAX/2-1);
        src += sx + sy*stride;
        if(   (unsigned)sx >= w - b_w - (HTAPS_MAX-2)
           || (unsigned)sy >= h - b_h - (HTAPS_MAX-2)){
            s->dsp.emulated_edge_mc(tmp + MB_SIZE, src, stride, b_w+HTAPS_MAX-1, b_h+HTAPS_MAX-1, sx, sy, w, h);
            src= tmp + MB_SIZE;
        }
        assert(b_w>1 && b_h>1);
        assert((tab_index>=0 && tab_index<4) || b_w==32);
        if((dx&3) || (dy&3) || !(b_w == b_h || 2*b_w == b_h || b_w == 2*b_h) || (b_w&(b_w-1)) || !s->plane[plane_index].fast_mc )
            mc_block(&s->plane[plane_index], dst, src, stride, b_w, b_h, dx, dy);
        else if(b_w==32){
            int y;
            for(y=0; y<b_h; y+=16){
                s->dsp.put_h264_qpel_pixels_tab[0][dy+(dx>>2)](dst + y*stride, src + 3 + (y+3)*stride,stride);
                s->dsp.put_h264_qpel_pixels_tab[0][dy+(dx>>2)](dst + 16 + y*stride, src + 19 + (y+3)*stride,stride);
            }
        }else if(b_w==b_h)
            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst,src + 3 + 3*stride,stride);
        else if(b_w==2*b_h){
            s->dsp.put_h264_qpel_pixels_tab[tab_index+1][dy+(dx>>2)](dst    ,src + 3       + 3*stride,stride);
            s->dsp.put_h264_qpel_pixels_tab[tab_index+1][dy+(dx>>2)](dst+b_h,src + 3 + b_h + 3*stride,stride);
        }else{
            assert(2*b_w==b_h);
            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst           ,src + 3 + 3*stride           ,stride);
            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst+b_w*stride,src + 3 + 3*stride+b_w*stride,stride);
        }
    }
}
['void ff_snow_pred_block(SnowContext *s, uint8_t *dst, uint8_t *tmp, int stride, int sx, int sy, int b_w, int b_h, BlockNode *block, int plane_index, int w, int h){\n    if(block->type & BLOCK_INTRA){\n        int x, y;\n        const int color = block->color[plane_index];\n        const int color4= color*0x01010101;\n        if(b_w==32){\n            for(y=0; y < b_h; y++){\n                *(uint32_t*)&dst[0 + y*stride]= color4;\n                *(uint32_t*)&dst[4 + y*stride]= color4;\n                *(uint32_t*)&dst[8 + y*stride]= color4;\n                *(uint32_t*)&dst[12+ y*stride]= color4;\n                *(uint32_t*)&dst[16+ y*stride]= color4;\n                *(uint32_t*)&dst[20+ y*stride]= color4;\n                *(uint32_t*)&dst[24+ y*stride]= color4;\n                *(uint32_t*)&dst[28+ y*stride]= color4;\n            }\n        }else if(b_w==16){\n            for(y=0; y < b_h; y++){\n                *(uint32_t*)&dst[0 + y*stride]= color4;\n                *(uint32_t*)&dst[4 + y*stride]= color4;\n                *(uint32_t*)&dst[8 + y*stride]= color4;\n                *(uint32_t*)&dst[12+ y*stride]= color4;\n            }\n        }else if(b_w==8){\n            for(y=0; y < b_h; y++){\n                *(uint32_t*)&dst[0 + y*stride]= color4;\n                *(uint32_t*)&dst[4 + y*stride]= color4;\n            }\n        }else if(b_w==4){\n            for(y=0; y < b_h; y++){\n                *(uint32_t*)&dst[0 + y*stride]= color4;\n            }\n        }else{\n            for(y=0; y < b_h; y++){\n                for(x=0; x < b_w; x++){\n                    dst[x + y*stride]= color;\n                }\n            }\n        }\n    }else{\n        uint8_t *src= s->last_picture[block->ref].data[plane_index];\n        const int scale= plane_index ?  s->mv_scale : 2*s->mv_scale;\n        int mx= block->mx*scale;\n        int my= block->my*scale;\n        const int dx= mx&15;\n        const int dy= my&15;\n        const int tab_index= 3 - (b_w>>2) + (b_w>>4);\n        sx += (mx>>4) - (HTAPS_MAX/2-1);\n        sy += (my>>4) - (HTAPS_MAX/2-1);\n        src += sx + sy*stride;\n        if(   (unsigned)sx >= w - b_w - (HTAPS_MAX-2)\n           || (unsigned)sy >= h - b_h - (HTAPS_MAX-2)){\n            s->dsp.emulated_edge_mc(tmp + MB_SIZE, src, stride, b_w+HTAPS_MAX-1, b_h+HTAPS_MAX-1, sx, sy, w, h);\n            src= tmp + MB_SIZE;\n        }\n        assert(b_w>1 && b_h>1);\n        assert((tab_index>=0 && tab_index<4) || b_w==32);\n        if((dx&3) || (dy&3) || !(b_w == b_h || 2*b_w == b_h || b_w == 2*b_h) || (b_w&(b_w-1)) || !s->plane[plane_index].fast_mc )\n            mc_block(&s->plane[plane_index], dst, src, stride, b_w, b_h, dx, dy);\n        else if(b_w==32){\n            int y;\n            for(y=0; y<b_h; y+=16){\n                s->dsp.put_h264_qpel_pixels_tab[0][dy+(dx>>2)](dst + y*stride, src + 3 + (y+3)*stride,stride);\n                s->dsp.put_h264_qpel_pixels_tab[0][dy+(dx>>2)](dst + 16 + y*stride, src + 19 + (y+3)*stride,stride);\n            }\n        }else if(b_w==b_h)\n            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst,src + 3 + 3*stride,stride);\n        else if(b_w==2*b_h){\n            s->dsp.put_h264_qpel_pixels_tab[tab_index+1][dy+(dx>>2)](dst    ,src + 3       + 3*stride,stride);\n            s->dsp.put_h264_qpel_pixels_tab[tab_index+1][dy+(dx>>2)](dst+b_h,src + 3 + b_h + 3*stride,stride);\n        }else{\n            assert(2*b_w==b_h);\n            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst           ,src + 3 + 3*stride           ,stride);\n            s->dsp.put_h264_qpel_pixels_tab[tab_index  ][dy+(dx>>2)](dst+b_w*stride,src + 3 + 3*stride+b_w*stride,stride);\n        }\n    }\n}']