libavformat/avidec.c:603: error: Buffer Overrun L2
  Offset: [-528, 2277] Size: 20 by call to `avi_load_index`.

libavformat/avidec.c:227:1: Parameter `s->nb_streams`
225. }
226. 
227. static int avi_read_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
228. {
229.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:603:9: Call
601. 
602.     if(!avi->index_loaded && !url_is_streamed(pb))
603.         avi_load_index(s);
             ^
604.     avi->index_loaded = 1;
605.     avi->non_interleaved |= guess_ni_flag(s);

libavformat/avidec.c:927:1: Parameter `s->nb_streams`
  925. }
  926. 
  927. static int avi_load_index(AVFormatContext *s)
       ^
  928. {
  929.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:953:17: Call
  951.         switch(tag) {
  952.         case MKTAG('i', 'd', 'x', '1'):
  953.             if (avi_read_idx1(s, size) < 0)
                       ^
  954.                 goto skip;
  955.             else

libavformat/avidec.c:856:1: <Offset trace>
854. /* XXX: we make the implicit supposition that the position are sorted
855.    for each stream */
856. static int avi_read_idx1(AVFormatContext *s, int size)
     ^
857. {
858.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:856:1: Parameter `s->nb_streams`
    854. /* XXX: we make the implicit supposition that the position are sorted
    855.    for each stream */
    856. static int avi_read_idx1(AVFormatContext *s, int size)
         ^
    857. {
    858.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:856:1: <Length trace>
854. /* XXX: we make the implicit supposition that the position are sorted
855.    for each stream */
856. static int avi_read_idx1(AVFormatContext *s, int size)
     ^
857. {
858.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:856:1: Parameter `s->streams[*]`
    854. /* XXX: we make the implicit supposition that the position are sorted
    855.    for each stream */
    856. static int avi_read_idx1(AVFormatContext *s, int size)
         ^
    857. {
    858.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:888:14: Array access: Offset: [-528, 2277] Size: 20 by call to `avi_load_index` 
    886.         if (index >= s->nb_streams)
    887.             continue;
    888.         st = s->streams[index];
                      ^
    889.         ast = st->priv_data;
    890. 
