libavcodec/vp6.c:464: error: Buffer Overrun L1
  Offset: [8, 14] (⇐ [0, 1] + [8, 13]) Size: 2.

libavcodec/vp6.c:463:37: <Offset trace>
461.                     run = vp56_rac_get_tree(c, vp6_pcr_tree, model3);
462.                     if (!run)
463.                         for (run=9, i=0; i<6; i++)
                                         ^
464.                             run += vp56_rac_get_prob(c, model3[i+8]) << i;
465.                 }

libavcodec/vp6.c:463:37: Assignment
461.                     run = vp56_rac_get_tree(c, vp6_pcr_tree, model3);
462.                     if (!run)
463.                         for (run=9, i=0; i<6; i++)
                                         ^
464.                             run += vp56_rac_get_prob(c, model3[i+8]) << i;
465.                 }

libavcodec/vp6.c:405:1: <Length trace>
403. }
404. 
405. static void vp6_parse_coeff(vp56_context_t *s)
     ^
406. {
407.     vp56_range_coder_t *c = s->ccp;

libavcodec/vp6.c:405:1: Parameter `s->modelp->coeff_runv[*]`
403. }
404. 
405. static void vp6_parse_coeff(vp56_context_t *s)
     ^
406. {
407.     vp56_range_coder_t *c = s->ccp;

libavcodec/vp6.c:460:21: Assignment
458.                         break;
459. 
460.                     model3 = model->coeff_runv[coeff_idx >= 6];
                         ^
461.                     run = vp56_rac_get_tree(c, vp6_pcr_tree, model3);
462.                     if (!run)

libavcodec/vp6.c:464:57: Array access: Offset: [8, 14] (⇐ [0, 1] + [8, 13]) Size: 2
462.                     if (!run)
463.                         for (run=9, i=0; i<6; i++)
464.                             run += vp56_rac_get_prob(c, model3[i+8]) << i;
                                                             ^
465.                 }
466.             }
