libavcodec/h264_cavlc.c:1005: error: Buffer Overrun L1
  Offset: 26 Size: 24 by call to `decode_residual`.

libavcodec/h264_cavlc.c:1005:21: Call
1003.         if(cbp&0x30){
1004.             for(chroma_idx=0; chroma_idx<2; chroma_idx++)
1005.                 if( decode_residual(h, gb, h->mb + 256 + 16*4*chroma_idx, CHROMA_DC_BLOCK_INDEX, chroma_dc_scan, NULL, 4) < 0){
                          ^
1006.                     return -1;
1007.                 }

libavcodec/h264_cavlc.c:368:1: Parameter `n`
  366.  * @return <0 if an error occurred
  367.  */
  368. static int decode_residual(H264Context *h, GetBitContext *gb, DCTELEM *block, int n, const uint8_t *scantable, const uint32_t *qmul, int max_coeff){
       ^
  369.     MpegEncContext * const s = &h->s;
  370.     static const int coeff_token_table_index[17]= {0, 0, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3};

libavcodec/h264_cavlc.c:385:26: Call
  383.             total_coeff= coeff_token>>2;
  384.         }else{
  385.             total_coeff= pred_non_zero_count(h, n);
                                ^
  386.             coeff_token= get_vlc2(gb, coeff_token_vlc[ coeff_token_table_index[total_coeff] ].table, COEFF_TOKEN_VLC_BITS, 2);
  387.             total_coeff= coeff_token>>2;

libavcodec/h264_cavlc.c:229:1: <Offset trace>
227.  * @param n block index
228.  */
229. static inline int pred_non_zero_count(H264Context *h, int n){
     ^
230.     const int index8= scan8[n];
231.     const int left= h->non_zero_count_cache[index8 - 1];

libavcodec/h264_cavlc.c:229:1: Parameter `n`
    227.  * @param n block index
    228.  */
    229. static inline int pred_non_zero_count(H264Context *h, int n){
         ^
    230.     const int index8= scan8[n];
    231.     const int left= h->non_zero_count_cache[index8 - 1];

libavcodec/h264.h:687:1: <Length trace>
685. */
686. //This table must be here because scan8[constant] must be known at compiletime
687. static const uint8_t scan8[16 + 2*4]={
     ^
688.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
689.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264.h:687:1: Array declaration
    685. */
    686. //This table must be here because scan8[constant] must be known at compiletime
    687. static const uint8_t scan8[16 + 2*4]={
         ^
    688.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
    689.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264_cavlc.c:230:23: Array access: Offset: 26 Size: 24 by call to `decode_residual` 
    228.  */
    229. static inline int pred_non_zero_count(H264Context *h, int n){
    230.     const int index8= scan8[n];
                               ^
    231.     const int left= h->non_zero_count_cache[index8 - 1];
    232.     const int top = h->non_zero_count_cache[index8 - 8];
