libavcodec/h264.c:4066: error: Buffer Overrun L1
  Offset: [2, 49] Size: 2.

libavcodec/h264.c:4065:13: <Offset trace>
4063.         ref2frm[0]=
4064.         ref2frm[1]= -1;
4065.         for(i=0; i<48; i++)
                  ^
4066.             ref2frm[i+2]= 4*h->ref_list[j][i].frame_num
4067.                           +(h->ref_list[j][i].reference&3);

libavcodec/h264.c:4065:13: Assignment
4063.         ref2frm[0]=
4064.         ref2frm[1]= -1;
4065.         for(i=0; i<48; i++)
                  ^
4066.             ref2frm[i+2]= 4*h->ref_list[j][i].frame_num
4067.                           +(h->ref_list[j][i].reference&3);

libavcodec/h264.c:3679:1: <Length trace>
3677.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
3678.  */
3679. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
3680.     MpegEncContext * const s = &h->s;
3681.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:3679:1: Parameter `h->ref2frm[*][*]`
3677.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
3678.  */
3679. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
3680.     MpegEncContext * const s = &h->s;
3681.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:4062:9: Assignment
4060. 
4061.     for(j=0; j<2; j++){
4062.         int *ref2frm= h->ref2frm[h->slice_num&15][j];
              ^
4063.         ref2frm[0]=
4064.         ref2frm[1]= -1;

libavcodec/h264.c:4066:13: Array access: Offset: [2, 49] Size: 2
4064.         ref2frm[1]= -1;
4065.         for(i=0; i<48; i++)
4066.             ref2frm[i+2]= 4*h->ref_list[j][i].frame_num
                  ^
4067.                           +(h->ref_list[j][i].reference&3);
4068.     }
