libavcodec/h264.c:2978: error: Buffer Overrun L1
  Offset: [20, 51] Size: 2.

libavcodec/h264.c:2977:13: <Offset trace>
2975.         ref2frm[18+0]=
2976.         ref2frm[18+1]= -1;
2977.         for(i=16; i<48; i++)
                  ^
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
2979.                           + (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2977:13: Assignment
2975.         ref2frm[18+0]=
2976.         ref2frm[18+1]= -1;
2977.         for(i=16; i<48; i++)
                  ^
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
2979.                           + (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2435:1: <Length trace>
2433.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2434.  */
2435. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
2436.     MpegEncContext * const s = &h->s;
2437.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:2435:1: Parameter `h->ref2frm[*][*]`
2433.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2434.  */
2435. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
2436.     MpegEncContext * const s = &h->s;
2437.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:2951:9: Assignment
2949.     for(j=0; j<2; j++){
2950.         int id_list[16];
2951.         int *ref2frm= h->ref2frm[h->slice_num&(MAX_SLICES-1)][j];
              ^
2952.         for(i=0; i<16; i++){
2953.             id_list[i]= 60;

libavcodec/h264.c:2978:13: Array access: Offset: [20, 51] Size: 2
2976.         ref2frm[18+1]= -1;
2977.         for(i=16; i<48; i++)
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
                  ^
2979.                           + (h->ref_list[j][i].f.reference & 3);
2980.     }
