libavcodec/h264.c:3596: error: Buffer Overrun L2
  Offset: [16, 47] Size: 32.

libavcodec/h264.c:3594:14: <Offset trace>
3592.         ref2frm[18 + 0]     =
3593.             ref2frm[18 + 1] = -1;
3594.         for (i = 16; i < 48; i++)
                   ^
3595.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3596.                              (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:3594:14: Assignment
3592.         ref2frm[18 + 0]     =
3593.             ref2frm[18 + 1] = -1;
3594.         for (i = 16; i < 48; i++)
                   ^
3595.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3596.                              (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2965:1: <Length trace>
2963.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2964.  */
2965. static int decode_slice_header(H264Context *h, H264Context *h0)
      ^
2966. {
2967.     unsigned int first_mb_in_slice;

libavcodec/h264.c:2965:1: Parameter `h->ref_list[*][*]`
2963.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2964.  */
2965. static int decode_slice_header(H264Context *h, H264Context *h0)
      ^
2966. {
2967.     unsigned int first_mb_in_slice;

libavcodec/h264.c:3596:31: Array access: Offset: [16, 47] Size: 32
3594.         for (i = 16; i < 48; i++)
3595.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3596.                              (h->ref_list[j][i].f.reference & 3);
                                    ^
3597.     }
3598. 
