libavcodec/h264.c:4954: error: Buffer Overrun L1
  Offset: 26 Size: 24 by call to `decode_residual`.

libavcodec/h264.c:4954:21: Call
4952.         if(cbp&0x30){
4953.             for(chroma_idx=0; chroma_idx<2; chroma_idx++)
4954.                 if( decode_residual(h, gb, h->mb + 256 + 16*4*chroma_idx, CHROMA_DC_BLOCK_INDEX, chroma_dc_scan, NULL, 4) < 0){
                          ^
4955.                     return -1;
4956.                 }

libavcodec/h264.c:4295:1: Parameter `n`
  4293.  * @return <0 if an error occurred
  4294.  */
  4295. static int decode_residual(H264Context *h, GetBitContext *gb, DCTELEM *block, int n, const uint8_t *scantable, const uint32_t *qmul, int max_coeff){
        ^
  4296.     MpegEncContext * const s = &h->s;
  4297.     static const int coeff_token_table_index[17]= {0, 0, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3};

libavcodec/h264.c:4312:26: Call
  4310.             total_coeff= coeff_token>>2;
  4311.         }else{
  4312.             total_coeff= pred_non_zero_count(h, n);
                                 ^
  4313.             coeff_token= get_vlc2(gb, coeff_token_vlc[ coeff_token_table_index[total_coeff] ].table, COEFF_TOKEN_VLC_BITS, 2);
  4314.             total_coeff= coeff_token>>2;

libavcodec/h264.c:678:1: <Offset trace>
676.  * @param n block index
677.  */
678. static inline int pred_non_zero_count(H264Context *h, int n){
     ^
679.     const int index8= scan8[n];
680.     const int left= h->non_zero_count_cache[index8 - 1];

libavcodec/h264.c:678:1: Parameter `n`
    676.  * @param n block index
    677.  */
    678. static inline int pred_non_zero_count(H264Context *h, int n){
         ^
    679.     const int index8= scan8[n];
    680.     const int left= h->non_zero_count_cache[index8 - 1];

libavcodec/h264data.h:271:1: <Length trace>
269. */
270. 
271. static const uint8_t scan8[16 + 2*4]={
     ^
272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264data.h:271:1: Array declaration
    269. */
    270. 
    271. static const uint8_t scan8[16 + 2*4]={
         ^
    272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
    273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264.c:679:23: Array access: Offset: 26 Size: 24 by call to `decode_residual` 
    677.  */
    678. static inline int pred_non_zero_count(H264Context *h, int n){
    679.     const int index8= scan8[n];
                               ^
    680.     const int left= h->non_zero_count_cache[index8 - 1];
    681.     const int top = h->non_zero_count_cache[index8 - 8];
