libavcodec/elsdec.c:380: error: Buffer Overrun L3
  Offset added: 256 Size: [0, +oo].

libavcodec/elsdec.c:375:29: <Length trace>
373.     /* initialize probability tree */
374.     if (!ur->rem_rung_list) {
375.         ur->rem_rung_list = av_realloc(NULL, RUNG_SPACE);
                                 ^
376.         if (!ur->rem_rung_list) {
377.             ctx->err = AVERROR(ENOMEM);

libavcodec/elsdec.c:375:29: Call
373.     /* initialize probability tree */
374.     if (!ur->rem_rung_list) {
375.         ur->rem_rung_list = av_realloc(NULL, RUNG_SPACE);
                                 ^
376.         if (!ur->rem_rung_list) {
377.             ctx->err = AVERROR(ENOMEM);

libavutil/mem.c:111:9: Assignment
  109.     /* let's disallow possibly ambiguous cases */
  110.     if (size > (INT_MAX - 16))
  111.         return NULL;
               ^
  112. 
  113. #if HAVE_ALIGNED_MALLOC

libavcodec/elsdec.c:375:9: Assignment
373.     /* initialize probability tree */
374.     if (!ur->rem_rung_list) {
375.         ur->rem_rung_list = av_realloc(NULL, RUNG_SPACE);
             ^
376.         if (!ur->rem_rung_list) {
377.             ctx->err = AVERROR(ENOMEM);

libavcodec/elsdec.c:380:9: Array access: Offset added: 256 Size: [0, +oo]
378.             return 0;
379.         }
380.         memset(ur->rem_rung_list, 0, RUNG_SPACE);
             ^
381.         ur->rung_list_size = RUNG_SPACE;
382.         ur->avail_index    = ELS_EXPGOLOMB_LEN;
