libavcodec/h264.h:1253: error: Buffer Overrun L1
  Offset: [2, `h->list_count` + 19] (⇐ [2, 20] + [0, `h->list_count` - 1]) Size: 2.

libavcodec/h264.h:1163:1: <Offset trace>
1161.  * @returns non zero if the loop filter can be skiped
1162.  */
1163. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1164.     MpegEncContext * const s = &h->s;
1165.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1163:1: Parameter `h->list_count`
1161.  * @returns non zero if the loop filter can be skiped
1162.  */
1163. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1164.     MpegEncContext * const s = &h->s;
1165.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1163:1: <Length trace>
1161.  * @returns non zero if the loop filter can be skiped
1162.  */
1163. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1164.     MpegEncContext * const s = &h->s;
1165.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1163:1: Parameter `h->ref2frm[*][*]`
1161.  * @returns non zero if the loop filter can be skiped
1162.  */
1163. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1164.     MpegEncContext * const s = &h->s;
1165.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1252:17: Assignment
1250.             ref = &s->current_picture.ref_index[list][h->mb2b8_xy[mb_xy]];
1251.             {
1252.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
                      ^
1253.                 AV_WN32A(&h->ref_cache[list][scan8[ 0]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
1254.                 AV_WN32A(&h->ref_cache[list][scan8[ 2]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);

libavcodec/h264.h:1253:17: Array access: Offset: [2, h->list_count + 19] (⇐ [2, 20] + [0, h->list_count - 1]) Size: 2
1251.             {
1252.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
1253.                 AV_WN32A(&h->ref_cache[list][scan8[ 0]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
                      ^
1254.                 AV_WN32A(&h->ref_cache[list][scan8[ 2]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
1255.                 ref += h->b8_stride;
