libavformat/mov.c:127: error: Buffer Overrun L3
  Offset: [-128, +oo] Size: 128.

libavformat/mov.c:123:24: <Offset trace>
121. 
122.     for (i = 0; i < len; i++) {
123.         uint8_t t, c = get_byte(pb);
                            ^
124.         if (c < 0x80 && p < end)
125.             *p++ = c;

libavformat/mov.c:123:24: Call
121. 
122.     for (i = 0; i < len; i++) {
123.         uint8_t t, c = get_byte(pb);
                            ^
124.         if (c < 0x80 && p < end)
125.             *p++ = c;

libavformat/aviobuf.c:397:5: Assignment
  395.     if (s->buf_ptr < s->buf_end)
  396.         return *s->buf_ptr++;
  397.     return 0;
           ^
  398. }
  399. 

libavformat/mov.c:123:9: Assignment
121. 
122.     for (i = 0; i < len; i++) {
123.         uint8_t t, c = get_byte(pb);
             ^
124.         if (c < 0x80 && p < end)
125.             *p++ = c;

libavformat/mov.c:96:1: <Length trace>
94. }
95. 
96. static const uint32_t mac_to_unicode[128] = {
    ^
97.     0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
98.     0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,

libavformat/mov.c:96:1: Array declaration
94. }
95. 
96. static const uint32_t mac_to_unicode[128] = {
    ^
97.     0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
98.     0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,

libavformat/mov.c:127:13: Array access: Offset: [-128, +oo] Size: 128
125.             *p++ = c;
126.         else
127.             PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
                 ^
128.     }
129.     *p = 0;

static int mov_read_mac_string(MOVContext *c, ByteIOContext *pb, int len,
                               char *dst, int dstlen)
{
    char *p = dst;
    char *end = dst+dstlen-1;
    int i;
    for (i = 0; i < len; i++) {
        uint8_t t, c = get_byte(pb);
        if (c < 0x80 && p < end)
            *p++ = c;
        else
            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
    }
    *p = 0;
    return p - dst;
}
['static int mov_read_mac_string(MOVContext *c, ByteIOContext *pb, int len,\n                               char *dst, int dstlen)\n{\n    char *p = dst;\n    char *end = dst+dstlen-1;\n    int i;\n    for (i = 0; i < len; i++) {\n        uint8_t t, c = get_byte(pb);\n        if (c < 0x80 && p < end)\n            *p++ = c;\n        else\n            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);\n    }\n    *p = 0;\n    return p - dst;\n}', 'int get_byte(ByteIOContext *s)\n{\n    if (s->buf_ptr >= s->buf_end)\n        fill_buffer(s);\n    if (s->buf_ptr < s->buf_end)\n        return *s->buf_ptr++;\n    return 0;\n}']