libavcodec/cavsdec.c:552: error: Buffer Overrun L3
  Offset: [-3, +oo] Size: 9 by call to `decode_mb_i`.

libavcodec/cavsdec.c:552:13: Call
550.         do {
551.             check_for_slice(h);
552.             decode_mb_i(h, 0);
                 ^
553.         } while(ff_cavs_next_mb(h));
554.     } else if(h->pic_type == AV_PICTURE_TYPE_P) {

libavcodec/cavsdec.c:190:1: <Offset trace>
188.  ****************************************************************************/
189. 
190. static int decode_mb_i(AVSContext *h, int cbp_code) {
     ^
191.     GetBitContext *gb = &h->s.gb;
192.     int block, pred_mode_uv;

libavcodec/cavsdec.c:190:1: Global `ff_cavs_scan3x3`
  188.  ****************************************************************************/
  189. 
  190. static int decode_mb_i(AVSContext *h, int cbp_code) {
       ^
  191.     GetBitContext *gb = &h->s.gb;
  192.     int block, pred_mode_uv;

libavcodec/cavsdec.c:202:9: Assignment
  200.     for(block=0;block<4;block++) {
  201.         int nA,nB,predpred;
  202.         int pos = ff_cavs_scan3x3[block];
               ^
  203. 
  204.         nA = h->pred_mode_Y[pos-1];

libavcodec/cavsdec.c:190:1: <Length trace>
188.  ****************************************************************************/
189. 
190. static int decode_mb_i(AVSContext *h, int cbp_code) {
     ^
191.     GetBitContext *gb = &h->s.gb;
192.     int block, pred_mode_uv;

libavcodec/cavsdec.c:190:1: Parameter `h->pred_mode_Y[*]`
  188.  ****************************************************************************/
  189. 
  190. static int decode_mb_i(AVSContext *h, int cbp_code) {
       ^
  191.     GetBitContext *gb = &h->s.gb;
  192.     int block, pred_mode_uv;

libavcodec/cavsdec.c:205:14: Array access: Offset: [-3, +oo] Size: 9 by call to `decode_mb_i` 
  203. 
  204.         nA = h->pred_mode_Y[pos-1];
  205.         nB = h->pred_mode_Y[pos-3];
                    ^
  206.         predpred = FFMIN(nA,nB);
  207.         if(predpred == NOT_AVAIL) // if either is not available
