libavcodec/h264.c:4138: error: Buffer Overrun L3
  Offset: [-2147483648, +oo] Size: 32 by call to `fill_default_ref_list`.

libavcodec/h264.c:3862:1: Parameter `h->short_ref_count`
3860.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
3861.  */
3862. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
3863.     MpegEncContext * const s = &h->s;
3864.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:4138:9: Call
4136. 
4137.     if(!default_ref_list_done){
4138.         fill_default_ref_list(h);
              ^
4139.     }
4140. 

libavcodec/h264.c:2870:13: <Offset trace>
2868.         /* sort frame according to poc in B slice */
2869.         for(out_i=0; out_i<h->short_ref_count; out_i++){
2870.             int best_i=INT_MIN;
                  ^
2871.             int best_poc=INT_MAX;
2872. 

libavcodec/h264.c:2870:13: Assignment
  2868.         /* sort frame according to poc in B slice */
  2869.         for(out_i=0; out_i<h->short_ref_count; out_i++){
  2870.             int best_i=INT_MIN;
                    ^
  2871.             int best_poc=INT_MAX;
  2872. 

libavcodec/h264.c:2842:1: <Length trace>
2840.  * fills the default_ref_list.
2841.  */
2842. static int fill_default_ref_list(H264Context *h){
      ^
2843.     MpegEncContext * const s = &h->s;
2844.     int i;

libavcodec/h264.c:2842:1: Parameter `h->short_ref[*]`
  2840.  * fills the default_ref_list.
  2841.  */
  2842. static int fill_default_ref_list(H264Context *h){
        ^
  2843.     MpegEncContext * const s = &h->s;
  2844.     int i;

libavcodec/h264.c:2884:39: Array access: Offset: [-2147483648, +oo] Size: 32 by call to `fill_default_ref_list` 
  2882. 
  2883.             limit= best_poc;
  2884.             sorted_short_ref[out_i]= *h->short_ref[best_i];
                                              ^
  2885.             tprintf(h->s.avctx, "sorted poc: %d->%d poc:%d fn:%d\n", best_i, out_i, sorted_short_ref[out_i].poc, sorted_short_ref[out_i].frame_num);
  2886.             if (-1 == smallest_poc_greater_than_current) {
