libavcodec/h264.c:986: error: Buffer Overrun L2
  Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap`.

libavcodec/h264.c:959:1: Parameter `h->map_col_to_list0_field[*]`
957. }
958. 
959. static inline void direct_ref_list_init(H264Context * const h){
     ^
960.     MpegEncContext * const s = &h->s;
961.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264.c:986:13: Call
984.         fill_colmap(h, h->map_col_to_list0, list, sidx, ref1sidx, 0);
985.         for(field=0; field<2; field++)
986.             fill_colmap(h, h->map_col_to_list0_field[field], list, field, field, 1);
                 ^
987.     }
988. }

libavcodec/h264.c:926:1: <Offset trace>
924. }
925. 
926. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
     ^
927.     MpegEncContext * const s = &h->s;
928.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264.c:926:1: Parameter `list`
  924. }
  925. 
  926. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
       ^
  927.     MpegEncContext * const s = &h->s;
  928.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264.c:926:1: <Length trace>
924. }
925. 
926. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
     ^
927.     MpegEncContext * const s = &h->s;
928.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264.c:926:1: Parameter `*map`
  924. }
  925. 
  926. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
       ^
  927.     MpegEncContext * const s = &h->s;
  928.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264.c:949:21: Array access: Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap` 
  947.                 if(4*h->ref_list[list][j].frame_num + (h->ref_list[list][j].reference&3) == poc){
  948.                     int cur_ref= mbafi ? (j-16)^field : j;
  949.                     map[list][2*old_ref + (rfield^field) + 16] = cur_ref;
                           ^
  950.                     if(rfield == field)
  951.                         map[list][old_ref] = cur_ref;
