libavcodec/h264.c:5997: error: Buffer Overrun L2
  Offset: [16, 31] Size: 24 by call to `decode_cabac_residual`.

libavcodec/h264.c:5995:22: Assignment
5993.             if( cbp&15 ) {
5994.                 qmul = h->dequant4_coeff[0][s->qscale];
5995.                 for( i = 0; i < 16; i++ ) {
                           ^
5996.                     //av_log( s->avctx, AV_LOG_ERROR, "INTRA16x16 AC:%d\n", i );
5997.                     decode_cabac_residual(h, h->mb + 16*i, 1, i, scan + 1, qmul, 15);

libavcodec/h264.c:5997:21: Call
5995.                 for( i = 0; i < 16; i++ ) {
5996.                     //av_log( s->avctx, AV_LOG_ERROR, "INTRA16x16 AC:%d\n", i );
5997.                     decode_cabac_residual(h, h->mb + 16*i, 1, i, scan + 1, qmul, 15);
                          ^
5998.                 }
5999.             } else {

libavcodec/h264.c:5371:1: Parameter `n`
  5369. };
  5370. 
  5371. static void decode_cabac_residual( H264Context *h, DCTELEM *block, int cat, int n, const uint8_t *scantable, const uint32_t *qmul, int max_coeff) {
        ^
  5372.     const int mb_xy  = h->s.mb_x + h->s.mb_y*h->s.mb_stride;
  5373.     static const int significant_coeff_flag_offset[2][6] = {

libavcodec/h264.c:5431:49: Call
  5429.     /* read coded block flag */
  5430.     if( cat != 5 ) {
  5431.         if( get_cabac( CC, &h->cabac_state[85 + get_cabac_cbf_ctx( h, cat, n ) ] ) == 0 ) {
                                                        ^
  5432.             if( cat == 1 || cat == 2 )
  5433.                 h->non_zero_count_cache[scan8[n]] = 0;

libavcodec/h264.c:5336:1: <Offset trace>
5334. }
5335. 
5336. static inline int get_cabac_cbf_ctx( H264Context *h, int cat, int idx ) {
      ^
5337.     int nza, nzb;
5338.     int ctx = 0;

libavcodec/h264.c:5336:1: Parameter `idx`
    5334. }
    5335. 
    5336. static inline int get_cabac_cbf_ctx( H264Context *h, int cat, int idx ) {
          ^
    5337.     int nza, nzb;
    5338.     int ctx = 0;

libavcodec/h264data.h:271:1: <Length trace>
269. */
270. 
271. static const uint8_t scan8[16 + 2*4]={
     ^
272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264data.h:271:1: Array declaration
    269. */
    270. 
    271. static const uint8_t scan8[16 + 2*4]={
         ^
    272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
    273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264.c:5351:39: Array access: Offset: [16, 31] Size: 24 by call to `decode_cabac_residual` 
    5349.     } else {
    5350.         assert(cat == 4);
    5351.         nza = h->non_zero_count_cache[scan8[16+idx] - 1];
                                                ^
    5352.         nzb = h->non_zero_count_cache[scan8[16+idx] - 8];
    5353.     }
