libavformat/avidec.c:526: error: Buffer Overrun L2
  Offset: [0, 2277] Size: 20 by call to `read_braindead_odml_indx`.

libavformat/avidec.c:227:1: Parameter `s->nb_streams`
225. }
226. 
227. static int avi_read_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
228. {
229.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:526:17: Call
524.             i= url_ftell(pb);
525.             if(!url_is_streamed(pb) && !(s->flags & AVFMT_FLAG_IGNIDX)){
526.                 read_braindead_odml_indx(s, 0);
                     ^
527.             }
528.             url_fseek(pb, i+size, SEEK_SET);

libavformat/avidec.c:109:1: <Offset trace>
107. }
108. 
109. static int read_braindead_odml_indx(AVFormatContext *s, int frame_num){
     ^
110.     AVIContext *avi = s->priv_data;
111.     ByteIOContext *pb = s->pb;

libavformat/avidec.c:109:1: Parameter `s->nb_streams`
  107. }
  108. 
  109. static int read_braindead_odml_indx(AVFormatContext *s, int frame_num){
       ^
  110.     AVIContext *avi = s->priv_data;
  111.     ByteIOContext *pb = s->pb;

libavformat/avidec.c:109:1: <Length trace>
107. }
108. 
109. static int read_braindead_odml_indx(AVFormatContext *s, int frame_num){
     ^
110.     AVIContext *avi = s->priv_data;
111.     ByteIOContext *pb = s->pb;

libavformat/avidec.c:109:1: Parameter `s->streams[*]`
  107. }
  108. 
  109. static int read_braindead_odml_indx(AVFormatContext *s, int frame_num){
       ^
  110.     AVIContext *avi = s->priv_data;
  111.     ByteIOContext *pb = s->pb;

libavformat/avidec.c:132:9: Array access: Offset: [0, 2277] Size: 20 by call to `read_braindead_odml_indx` 
  130.     if(stream_id > s->nb_streams || stream_id < 0)
  131.         return -1;
  132.     st= s->streams[stream_id];
               ^
  133.     ast = st->priv_data;
  134. 
