libavcodec/h264.c:3462: error: Buffer Overrun L2
  Offset: [16, 47] Size: 32.

libavcodec/h264.c:3460:14: <Offset trace>
3458.         ref2frm[18 + 0]     =
3459.             ref2frm[18 + 1] = -1;
3460.         for (i = 16; i < 48; i++)
                   ^
3461.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3462.                              (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:3460:14: Assignment
3458.         ref2frm[18 + 0]     =
3459.             ref2frm[18 + 1] = -1;
3460.         for (i = 16; i < 48; i++)
                   ^
3461.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3462.                              (h->ref_list[j][i].f.reference & 3);

libavcodec/h264.c:2865:1: <Length trace>
2863.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2864.  */
2865. static int decode_slice_header(H264Context *h, H264Context *h0)
      ^
2866. {
2867.     MpegEncContext *const s  = &h->s;

libavcodec/h264.c:2865:1: Parameter `h0->ref_list[*][*]`
2863.  * @return 0 if okay, <0 if an error occurred, 1 if decoding must not be multithreaded
2864.  */
2865. static int decode_slice_header(H264Context *h, H264Context *h0)
      ^
2866. {
2867.     MpegEncContext *const s  = &h->s;

libavcodec/h264.c:3462:31: Array access: Offset: [16, 47] Size: 32
3460.         for (i = 16; i < 48; i++)
3461.             ref2frm[i + 4] = 4 * id_list[(i - 16) >> 1] +
3462.                              (h->ref_list[j][i].f.reference & 3);
                                    ^
3463.     }
3464. 
