libavcodec/h264.c:6796: error: Buffer Overrun L2
  Offset: [-oo, 12+max(51, `h->s.qscale`)] Size: 52 by call to `hl_decode_mb`.

libavcodec/h264.c:6759:1: Parameter `h->s.qscale`
6757. }
6758. 
6759. static int decode_slice(struct AVCodecContext *avctx, H264Context *h){
      ^
6760.     MpegEncContext * const s = &h->s;
6761.     const int part_mask= s->partitioned_frame ? (AC_END|AC_ERROR) : 0x7F;

libavcodec/h264.c:6792:23: Call
6790.         for(;;){
6791. //START_TIMER
6792.             int ret = decode_mb_cabac(h);
                            ^
6793.             int eos;
6794. //STOP_TIMER("decode_mb_cabac")

libavcodec/h264.c:5587:1: Parameter `h->s.qscale`
  5585.  * @returns 0 if ok, AC_ERROR / DC_ERROR / MV_ERROR if an error is noticed
  5586.  */
  5587. static int decode_mb_cabac(H264Context *h) {
        ^
  5588.     MpegEncContext * const s = &h->s;
  5589.     int mb_xy;

libavcodec/h264.c:6796:24: Call
6794. //STOP_TIMER("decode_mb_cabac")
6795. 
6796.             if(ret>=0) hl_decode_mb(h);
                             ^
6797. 
6798.             if( ret >= 0 && FRAME_MBAFF ) { //FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264.c:2725:1: Parameter `h->s.qscale`
  2723. }
  2724. 
  2725. static void hl_decode_mb(H264Context *h){
        ^
  2726.     MpegEncContext * const s = &h->s;
  2727.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2735:9: Call
  2733. 
  2734.     if (is_complex)
  2735.         hl_decode_mb_complex(h);
                ^
  2736.     else hl_decode_mb_simple(h);
  2737. }

libavcodec/h264.c:2721:1: Parameter `h->s.qscale`
    2719.  * Process a macroblock; this handles edge cases, such as interlacing.
    2720.  */
    2721. static void av_noinline hl_decode_mb_complex(H264Context *h){
          ^
    2722.     hl_decode_mb_internal(h, 0);
    2723. }

libavcodec/h264.c:2722:5: Call
    2720.  */
    2721. static void av_noinline hl_decode_mb_complex(H264Context *h){
    2722.     hl_decode_mb_internal(h, 0);
              ^
    2723. }
    2724. 

libavcodec/h264.c:2435:1: <Offset trace>
2433. }
2434. 
2435. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
      ^
2436.     MpegEncContext * const s = &h->s;
2437.     const int mb_x= s->mb_x;

libavcodec/h264.c:2435:1: Parameter `h->s.qscale`
      2433. }
      2434. 
      2435. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
            ^
      2436.     MpegEncContext * const s = &h->s;
      2437.     const int mb_x= s->mb_x;

libavcodec/h264data.h:83:1: <Length trace>
81. {-1, 2, 0, 1, -1, 4, 3};
82. 
83. static const uint8_t chroma_qp[52]={
    ^
84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264data.h:83:1: Array declaration
      81. {-1, 2, 0, 1, -1, 4, 3};
      82. 
      83. static const uint8_t chroma_qp[52]={
          ^
      84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
      85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264.c:2663:72: Array access: Offset: [-oo, 12+max(51, h->s.qscale)] Size: 52 by call to `hl_decode_mb` 
      2661.                     if(h->non_zero_count_cache[ scan8[i] ] || h->mb[i*16]){
      2662.                         uint8_t * const ptr= dest[(i&4)>>2] + block_offset[i];
      2663.                         svq3_add_idct_c(ptr, h->mb + i*16, uvlinesize, chroma_qp[s->qscale + 12] - 12, 2);
                                                                                   ^
      2664.                     }
      2665.                 }
