libavcodec/h264_cavlc.c:768: error: Buffer Overrun L1
  Offset: 9 Size: 1.

libavcodec/h264_cavlc.c:682:17: <Length trace>
680.             }
681.             if( IS_DIRECT(h->sub_mb_type[0]|h->sub_mb_type[1]|h->sub_mb_type[2]|h->sub_mb_type[3])) {
682.                 ff_h264_pred_direct_motion(h, &mb_type);
                     ^
683.                 h->ref_cache[0][scan8[4]] =
684.                 h->ref_cache[1][scan8[4]] =

libavcodec/h264_cavlc.c:682:17: Call
680.             }
681.             if( IS_DIRECT(h->sub_mb_type[0]|h->sub_mb_type[1]|h->sub_mb_type[2]|h->sub_mb_type[3])) {
682.                 ff_h264_pred_direct_motion(h, &mb_type);
                     ^
683.                 h->ref_cache[0][scan8[4]] =
684.                 h->ref_cache[1][scan8[4]] =

libavcodec/h264_direct.c:133:1: Parameter `h->mv_cache[*][*][*]`
  131. }
  132. 
  133. void ff_h264_pred_direct_motion(H264Context * const h, int *mb_type){
       ^
  134.     MpegEncContext * const s = &h->s;
  135.     int b8_stride = h->b8_stride;

libavcodec/h264_cavlc.c:766:21: Assignment
764.                     }
765.                 }else{
766.                     uint32_t *p= (uint32_t *)&h->mv_cache[list][ scan8[4*i] ][0];
                         ^
767.                     p[0] = p[1]=
768.                     p[8] = p[9]= 0;

libavcodec/h264_cavlc.c:768:28: Array access: Offset: 9 Size: 1
766.                     uint32_t *p= (uint32_t *)&h->mv_cache[list][ scan8[4*i] ][0];
767.                     p[0] = p[1]=
768.                     p[8] = p[9]= 0;
                                ^
769.                 }
770.             }
