libavformat/dv.c:462: error: Buffer Overrun L2
  Offset: [0, 7] Size: 3 by call to `avpriv_dv_produce_packet`.

libavformat/dv.c:459:13: Call
457.             return AVERROR(EIO);
458.         size = c->dv_demux->sys->frame_size;
459.         if (avio_read(s->pb, c->buf, size) <= 0)
                 ^
460.             return AVERROR(EIO);
461. 

libavformat/aviobuf.c:435:1: Parameter `*buf`
  433. }
  434. 
  435. int avio_read(AVIOContext *s, unsigned char *buf, int size)
       ^
  436. {
  437.     int len, size1;

libavformat/dv.c:462:16: Call
460.             return AVERROR(EIO);
461. 
462.         size = avpriv_dv_produce_packet(c->dv_demux, pkt, c->buf, size);
                    ^
463.     }
464. 

libavformat/dv.c:320:1: Parameter `*buf`
  318. }
  319. 
  320. int avpriv_dv_produce_packet(DVDemuxContext *c, AVPacket *pkt,
       ^
  321.                       uint8_t* buf, int buf_size)
  322. {

libavformat/dv.c:327:20: Call
  325. 
  326.     if (buf_size < DV_PROFILE_BYTES ||
  327.         !(c->sys = avpriv_dv_frame_profile(c->sys, buf, buf_size)) ||
                          ^
  328.         buf_size < c->sys->frame_size) {
  329.           return -1;   /* Broken frame, or not enough data */

libavcodec/dvdata.c:248:1: Parameter `*frame`
    246. };
    247. 
    248. const DVprofile* avpriv_dv_frame_profile(const DVprofile *sys,
         ^
    249.                                   const uint8_t* frame, unsigned buf_size)
    250. {

libavformat/dv.c:340:5: Call
  338.        ppcm[i] = c->audio_buf[i];
  339.     }
  340.     dv_extract_audio(buf, ppcm, c->sys);
           ^
  341. 
  342.     /* We work with 720p frames split in half, thus even frames have

libavformat/dv.c:105:1: <Offset trace>
103.  *    are converted into 16bit linear ones.
104.  */
105. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
     ^
106.                             const DVprofile *sys)
107. {

libavformat/dv.c:105:1: Parameter `*frame`
    103.  *    are converted into 16bit linear ones.
    104.  */
    105. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
         ^
    106.                             const DVprofile *sys)
    107. {

libavformat/dv.c:113:15: Call
    111.     uint8_t *pcm, ipcm;
    112. 
    113.     as_pack = dv_extract_pack(frame, dv_audio_source);
                       ^
    114.     if (!as_pack)    /* No audio ? */
    115.         return 0;

libavformat/dv.c:76:1: Parameter `t`
      74.  * to have a fallback mechanism for complete search of missing packs.
      75.  */
      76. static const uint8_t* dv_extract_pack(uint8_t* frame, enum dv_pack_type t)
          ^
      77. {
      78.     int offs;

libavformat/dv.c:118:5: Assignment
    116. 
    117.     smpls =  as_pack[1] & 0x3f;       /* samples in this frame - min. samples */
    118.     freq  = (as_pack[4] >> 3) & 0x07; /* 0 - 48kHz, 1 - 44,1kHz, 2 - 32kHz */
             ^
    119.     quant =  as_pack[4] & 0x07;       /* 0 - 16bit linear, 1 - 12bit nonlinear */
    120. 

libavformat/dv.c:105:1: <Length trace>
103.  *    are converted into 16bit linear ones.
104.  */
105. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
     ^
106.                             const DVprofile *sys)
107. {

libavformat/dv.c:105:1: Parameter `sys->audio_min_samples[*]`
    103.  *    are converted into 16bit linear ones.
    104.  */
    105. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
         ^
    106.                             const DVprofile *sys)
    107. {

libavformat/dv.c:124:13: Array access: Offset: [0, 7] Size: 3 by call to `avpriv_dv_produce_packet` 
    122.         return -1; /* unsupported quantization */
    123. 
    124.     size = (sys->audio_min_samples[freq] + smpls) * 4; /* 2ch, 2bytes */
                     ^
    125.     half_ch = sys->difseg_size / 2;
    126. 
