libavformat/dv.c:414: error: Buffer Overrun L2
  Offset: [0, 7] Size: 3 by call to `dv_produce_packet`.

libavformat/dv.c:411:13: Call
409.     if (size < 0) {
410.         size = c->dv_demux->sys->frame_size;
411.         if (get_buffer(s->pb, c->buf, size) <= 0)
                 ^
412.             return AVERROR(EIO);
413. 

libavformat/aviobuf.c:365:1: Parameter `*buf`
  363. }
  364. 
  365. int get_buffer(ByteIOContext *s, unsigned char *buf, int size)
       ^
  366. {
  367.     int len, size1;

libavformat/dv.c:414:16: Call
412.             return AVERROR(EIO);
413. 
414.         size = dv_produce_packet(c->dv_demux, pkt, c->buf, size);
                    ^
415.     }
416. 

libavformat/dv.c:309:1: Parameter `*buf`
  307. }
  308. 
  309. int dv_produce_packet(DVDemuxContext *c, AVPacket *pkt,
       ^
  310.                       uint8_t* buf, int buf_size)
  311. {

libavformat/dv.c:315:20: Call
  313. 
  314.     if (buf_size < DV_PROFILE_BYTES ||
  315.         !(c->sys = dv_frame_profile(buf)) ||
                          ^
  316.         buf_size < c->sys->frame_size) {
  317.           return -1;   /* Broken frame, or not enough data */

libavcodec/dvdata.h:2664:1: Parameter `*frame`
    2662. #define DV_MAX_FRAME_SIZE 288000
    2663. 
    2664. static inline const DVprofile* dv_frame_profile(const uint8_t* frame)
          ^
    2665. {
    2666.     if ((frame[3] & 0x80) == 0) {      /* DSF flag */

libavformat/dv.c:322:12: Call
  320.     /* Queueing audio packet */
  321.     /* FIXME: in case of no audio/bad audio we have to do something */
  322.     size = dv_extract_audio_info(c, buf);
                  ^
  323.     for (i=0; i<c->ach; i++) {
  324.        c->audio_pkt[i].size = size;

libavformat/dv.c:182:1: Parameter `*frame`
    180. }
    181. 
    182. static int dv_extract_audio_info(DVDemuxContext* c, uint8_t* frame)
         ^
    183. {
    184.     const uint8_t* as_pack;

libavformat/dv.c:187:15: Call
    185.     int freq, stype, smpls, quant, i, ach;
    186. 
    187.     as_pack = dv_extract_pack(frame, dv_audio_source);
                       ^
    188.     if (!as_pack || !c->sys) {    /* No audio ? */
    189.         c->ach = 0;

libavformat/dv.c:72:1: Parameter `t`
      70.  * to have a fallback mechanism for complete search of missing packs.
      71.  */
      72. static const uint8_t* dv_extract_pack(uint8_t* frame, enum dv_pack_type t)
          ^
      73. {
      74.     int offs;

libavformat/dv.c:327:5: Call
  325.        c->audio_pkt[i].pts  = c->abytes * 30000*8 / c->ast[i]->codec->bit_rate;
  326.     }
  327.     dv_extract_audio(buf, c->audio_buf[0], c->audio_buf[1], c->sys);
           ^
  328.     c->abytes += size;
  329. 

libavformat/dv.c:101:1: <Offset trace>
 99.  *    are converted into 16bit linear ones.
100.  */
101. static int dv_extract_audio(uint8_t* frame, uint8_t* pcm, uint8_t* pcm2,
     ^
102.                             const DVprofile *sys)
103. {

libavformat/dv.c:101:1: Parameter `*frame`
     99.  *    are converted into 16bit linear ones.
    100.  */
    101. static int dv_extract_audio(uint8_t* frame, uint8_t* pcm, uint8_t* pcm2,
         ^
    102.                             const DVprofile *sys)
    103. {

libavformat/dv.c:108:15: Call
    106.     const uint8_t* as_pack;
    107. 
    108.     as_pack = dv_extract_pack(frame, dv_audio_source);
                       ^
    109.     if (!as_pack)    /* No audio ? */
    110.         return 0;

libavformat/dv.c:72:1: Parameter `t`
      70.  * to have a fallback mechanism for complete search of missing packs.
      71.  */
      72. static const uint8_t* dv_extract_pack(uint8_t* frame, enum dv_pack_type t)
          ^
      73. {
      74.     int offs;

libavformat/dv.c:113:5: Assignment
    111. 
    112.     smpls = as_pack[1] & 0x3f; /* samples in this frame - min. samples */
    113.     freq = (as_pack[4] >> 3) & 0x07; /* 0 - 48KHz, 1 - 44,1kHz, 2 - 32 kHz */
             ^
    114.     quant = as_pack[4] & 0x07; /* 0 - 16bit linear, 1 - 12bit nonlinear */
    115. 

libavformat/dv.c:101:1: <Length trace>
 99.  *    are converted into 16bit linear ones.
100.  */
101. static int dv_extract_audio(uint8_t* frame, uint8_t* pcm, uint8_t* pcm2,
     ^
102.                             const DVprofile *sys)
103. {

libavformat/dv.c:101:1: Parameter `sys->audio_min_samples[*]`
     99.  *    are converted into 16bit linear ones.
    100.  */
    101. static int dv_extract_audio(uint8_t* frame, uint8_t* pcm, uint8_t* pcm2,
         ^
    102.                             const DVprofile *sys)
    103. {

libavformat/dv.c:119:13: Array access: Offset: [0, 7] Size: 3 by call to `dv_produce_packet` 
    117.         return -1; /* Unsupported quantization */
    118. 
    119.     size = (sys->audio_min_samples[freq] + smpls) * 4; /* 2ch, 2bytes */
                     ^
    120.     half_ch = sys->difseg_size/2;
    121. 
