libavcodec/h264_loopfilter.c:557: error: Buffer Overrun L1
  Offset: [2, 21] (⇐ [2, 20] + [0, 1]) Size: 2.

libavcodec/h264_loopfilter.c:556:22: <Offset trace>
554.                 int v = 0;
555. 
556.                 for( l = 0; !v && l < 1 + (h->slice_type_nos == FF_B_TYPE); l++ ) {
                          ^
557.                     v |= ref2frm[l][h->ref_cache[l][b_idx]] != ref2frmn[l][h->ref_cache[l][bn_idx]] |
558.                          h->mv_cache[l][b_idx][0] - h->mv_cache[l][bn_idx][0] + 3 >= 7U |

libavcodec/h264_loopfilter.c:556:22: Assignment
554.                 int v = 0;
555. 
556.                 for( l = 0; !v && l < 1 + (h->slice_type_nos == FF_B_TYPE); l++ ) {
                          ^
557.                     v |= ref2frm[l][h->ref_cache[l][b_idx]] != ref2frmn[l][h->ref_cache[l][bn_idx]] |
558.                          h->mv_cache[l][b_idx][0] - h->mv_cache[l][bn_idx][0] + 3 >= 7U |

libavcodec/h264_loopfilter.c:443:1: <Length trace>
441. 
442. 
443. static av_always_inline void filter_mb_dir(H264Context *h, int mb_x, int mb_y, uint8_t *img_y, uint8_t *img_cb, uint8_t *img_cr, unsigned int linesize, unsigned int uvlinesize, int mb_xy, int mb_type, int mvy_limit, int first_vertical_edge_done, int dir) {
     ^
444.     MpegEncContext * const s = &h->s;
445.     int edge;

libavcodec/h264_loopfilter.c:443:1: Parameter `h->ref2frm[*][*]`
441. 
442. 
443. static av_always_inline void filter_mb_dir(H264Context *h, int mb_x, int mb_y, uint8_t *img_y, uint8_t *img_cb, uint8_t *img_cr, unsigned int linesize, unsigned int uvlinesize, int mb_xy, int mb_type, int mvy_limit, int first_vertical_edge_done, int dir) {
     ^
444.     MpegEncContext * const s = &h->s;
445.     int edge;

libavcodec/h264_loopfilter.c:448:5: Assignment
446.     const int mbm_xy = dir == 0 ? mb_xy -1 : h->top_mb_xy;
447.     const int mbm_type = s->current_picture.mb_type[mbm_xy];
448.     int (*ref2frm) [64] = h->ref2frm[ h->slice_num          &(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
         ^
449.     int (*ref2frmm)[64] = h->ref2frm[ h->slice_table[mbm_xy]&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
450.     int start = h->slice_table[mbm_xy] == 0xFFFF ? 1 : 0;

libavcodec/h264_loopfilter.c:557:26: Array access: Offset: [2, 21] (⇐ [2, 20] + [0, 1]) Size: 2
555. 
556.                 for( l = 0; !v && l < 1 + (h->slice_type_nos == FF_B_TYPE); l++ ) {
557.                     v |= ref2frm[l][h->ref_cache[l][b_idx]] != ref2frmn[l][h->ref_cache[l][bn_idx]] |
                              ^
558.                          h->mv_cache[l][b_idx][0] - h->mv_cache[l][bn_idx][0] + 3 >= 7U |
559.                          FFABS( h->mv_cache[l][b_idx][1] - h->mv_cache[l][bn_idx][1] ) >= mvy_limit;
