libavcodec/h264.c:6784: error: Buffer Overrun L2
  Offset: [-oo, 12+max(51, `h->s.qscale`)] Size: 52 by call to `hl_decode_mb`.

libavcodec/h264.c:6747:1: Parameter `h->s.qscale`
6745. }
6746. 
6747. static int decode_slice(struct AVCodecContext *avctx, H264Context *h){
      ^
6748.     MpegEncContext * const s = &h->s;
6749.     const int part_mask= s->partitioned_frame ? (AC_END|AC_ERROR) : 0x7F;

libavcodec/h264.c:6780:23: Call
6778.         for(;;){
6779. //START_TIMER
6780.             int ret = decode_mb_cabac(h);
                            ^
6781.             int eos;
6782. //STOP_TIMER("decode_mb_cabac")

libavcodec/h264.c:5577:1: Parameter `h->s.qscale`
  5575.  * @returns 0 if ok, AC_ERROR / DC_ERROR / MV_ERROR if an error is noticed
  5576.  */
  5577. static int decode_mb_cabac(H264Context *h) {
        ^
  5578.     MpegEncContext * const s = &h->s;
  5579.     const int mb_xy= s->mb_x + s->mb_y*s->mb_stride;

libavcodec/h264.c:6784:24: Call
6782. //STOP_TIMER("decode_mb_cabac")
6783. 
6784.             if(ret>=0) hl_decode_mb(h);
                             ^
6785. 
6786.             if( ret >= 0 && FRAME_MBAFF ) { //FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264.c:2724:1: Parameter `h->s.qscale`
  2722. }
  2723. 
  2724. static void hl_decode_mb(H264Context *h){
        ^
  2725.     MpegEncContext * const s = &h->s;
  2726.     const int mb_x= s->mb_x;

libavcodec/h264.c:2736:9: Call
  2734. 
  2735.     if (is_complex)
  2736.         hl_decode_mb_complex(h);
                ^
  2737.     else hl_decode_mb_simple(h);
  2738. }

libavcodec/h264.c:2720:1: Parameter `h->s.qscale`
    2718.  * Process a macroblock; this handles edge cases, such as interlacing.
    2719.  */
    2720. static void av_noinline hl_decode_mb_complex(H264Context *h){
          ^
    2721.     hl_decode_mb_internal(h, 0);
    2722. }

libavcodec/h264.c:2721:5: Call
    2719.  */
    2720. static void av_noinline hl_decode_mb_complex(H264Context *h){
    2721.     hl_decode_mb_internal(h, 0);
              ^
    2722. }
    2723. 

libavcodec/h264.c:2434:1: <Offset trace>
2432. }
2433. 
2434. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
      ^
2435.     MpegEncContext * const s = &h->s;
2436.     const int mb_x= s->mb_x;

libavcodec/h264.c:2434:1: Parameter `h->s.qscale`
      2432. }
      2433. 
      2434. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
            ^
      2435.     MpegEncContext * const s = &h->s;
      2436.     const int mb_x= s->mb_x;

libavcodec/h264data.h:83:1: <Length trace>
81. {-1, 2, 0, 1, -1, 4, 3};
82. 
83. static const uint8_t chroma_qp[52]={
    ^
84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264data.h:83:1: Array declaration
      81. {-1, 2, 0, 1, -1, 4, 3};
      82. 
      83. static const uint8_t chroma_qp[52]={
          ^
      84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
      85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264.c:2662:72: Array access: Offset: [-oo, 12+max(51, h->s.qscale)] Size: 52 by call to `hl_decode_mb` 
      2660.                     if(h->non_zero_count_cache[ scan8[i] ] || h->mb[i*16]){
      2661.                         uint8_t * const ptr= dest[(i&4)>>2] + block_offset[i];
      2662.                         svq3_add_idct_c(ptr, h->mb + i*16, uvlinesize, chroma_qp[s->qscale + 12] - 12, 2);
                                                                                   ^
      2663.                     }
      2664.                 }
