libavcodec/h264.c:2979: error: Buffer Overrun L2
  Offset: [16, 47] Size: 32.

libavcodec/h264.c:2977:13: <Offset trace>
2975.         ref2frm[18+0]=
2976.         ref2frm[18+1]= -1;
2977.         for(i=16; i<48; i++)
                  ^
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
2979.                           + (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2977:13: Assignment
2975.         ref2frm[18+0]=
2976.         ref2frm[18+1]= -1;
2977.         for(i=16; i<48; i++)
                  ^
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
2979.                           + (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2435:1: <Length trace>
2433.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2434.  */
2435. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
2436.     MpegEncContext * const s = &h->s;
2437.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:2435:1: Parameter `h0->ref_list[*][*]`
2433.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2434.  */
2435. static int decode_slice_header(H264Context *h, H264Context *h0){
      ^
2436.     MpegEncContext * const s = &h->s;
2437.     MpegEncContext * const s0 = &h0->s;

libavcodec/h264.c:2979:30: Array access: Offset: [16, 47] Size: 32
2977.         for(i=16; i<48; i++)
2978.             ref2frm[i+4]= 4*id_list[(i-16)>>1]
2979.                           + (h->ref_list[j][i].f.reference & 3);
                                   ^
2980.     }
2981. 
