libavcodec/ffv1.c:1472: error: Buffer Overrun L3
  Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame`.

libavcodec/ffv1.c:1455:5: Assignment
1453.     FFV1Context *fs= *(void**)arg;
1454.     FFV1Context *f= fs->avctx->priv_data;
1455.     int width = fs->slice_width;
          ^
1456.     int height= fs->slice_height;
1457.     int x= fs->slice_x;

libavcodec/ffv1.c:1472:9: Call
1470.         decode_plane(fs, p->data[2] + cx+cy*p->linesize[1], chroma_width, chroma_height, p->linesize[2], 1);
1471.     }else{
1472.         decode_rgb_frame(fs, (uint32_t*)p->data[0] + x + y*(p->linesize[0]/4), width, height, p->linesize[0]/4);
              ^
1473.     }
1474. 

libavcodec/ffv1.c:1410:1: Array declaration
  1408. }
  1409. 
  1410. static void decode_rgb_frame(FFV1Context *s, uint32_t *src, int w, int h, int stride){
        ^
  1411.     int x, y, p;
  1412.     int16_t *sample[3][2];

libavcodec/ffv1.c:1431:13: Call
  1429.             sample[p][1][-1]= sample[p][0][0  ];
  1430.             sample[p][0][ w]= sample[p][0][w-1];
  1431.             decode_line(s, w, sample[p], FFMIN(p, 1), 9);
                    ^
  1432.         }
  1433.         for(x=0; x<w; x++){

libavcodec/ffv1.c:1314:1: Parameter `w`
    1312. }
    1313. 
    1314. static av_always_inline void decode_line(FFV1Context *s, int w,
          ^
    1315.                                          int16_t *sample[2],
    1316.                                          int plane_index, int bits)

libavcodec/ffv1.c:1328:18: Call
    1326.         int diff, context, sign;
    1327. 
    1328.         context= get_context(p, sample[1] + x, sample[0] + x, sample[1] + x);
                           ^
    1329.         if(context < 0){
    1330.             context= -context;

libavcodec/ffv1.c:291:1: <Length trace>
289. }
290. 
291. static inline int get_context(PlaneContext *p, int16_t *src,
     ^
292.                               int16_t *last, int16_t *last2)
293. {

libavcodec/ffv1.c:291:1: Parameter `*src`
      289. }
      290. 
      291. static inline int get_context(PlaneContext *p, int16_t *src,
           ^
      292.                               int16_t *last, int16_t *last2)
      293. {

libavcodec/ffv1.c:301:24: Array access: Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame` 
      299.     if(p->quant_table[3][127]){
      300.         const int TT= last2[0];
      301.         const int LL=  src[-2];
                                  ^
      302.         return p->quant_table[0][(L-LT) & 0xFF] + p->quant_table[1][(LT-T) & 0xFF] + p->quant_table[2][(T-RT) & 0xFF]
      303.               +p->quant_table[3][(LL-L) & 0xFF] + p->quant_table[4][(TT-T) & 0xFF];
