libavcodec/h264.h:1321: error: Buffer Overrun L2
  Offset: [2, `h->list_count` + 34] (⇐ [2, 20+min(15, `*h->slice_table`)] + [0, `h->list_count` - 1]) Size: 16.

libavcodec/h264.h:1134:1: <Offset trace>
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: Parameter `h->list_count`
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: <Length trace>
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: Parameter `h->ref2frm[*]`
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1315:21: Assignment
1313.                     const int b_xy= h->mb2b_xy[left_xy[0]] + 3;
1314.                     const int b8_xy= h->mb2b8_xy[left_xy[0]] + 1;
1315.                     int (*ref2frm)[64] = h->ref2frm[ h->slice_table[left_xy[0]]&(MAX_SLICES-1) ] + (MB_MBAFF ? 20 : 2);
                          ^
1316.                     *(uint32_t*)h->mv_cache[list][scan8[0] - 1 + 0 ]= *(uint32_t*)s->current_picture.motion_val[list][b_xy + h->b_stride*0];
1317.                     *(uint32_t*)h->mv_cache[list][scan8[0] - 1 + 8 ]= *(uint32_t*)s->current_picture.motion_val[list][b_xy + h->b_stride*1];

libavcodec/h264.h:1321:60: Array access: Offset: [2, h->list_count + 34] (⇐ [2, 20+min(15, *h->slice_table)] + [0, h->list_count - 1]) Size: 16
1319.                     *(uint32_t*)h->mv_cache[list][scan8[0] - 1 +24 ]= *(uint32_t*)s->current_picture.motion_val[list][b_xy + h->b_stride*3];
1320.                     h->ref_cache[list][scan8[0] - 1 + 0 ]=
1321.                     h->ref_cache[list][scan8[0] - 1 + 8 ]= ref2frm[list][s->current_picture.ref_index[list][b8_xy + h->b8_stride*0]];
                                                                 ^
1322.                     h->ref_cache[list][scan8[0] - 1 +16 ]=
1323.                     h->ref_cache[list][scan8[0] - 1 +24 ]= ref2frm[list][s->current_picture.ref_index[list][b8_xy + h->b8_stride*1]];
