libavcodec/h264dec.c:883: error: Buffer Overrun L3
  Offset: [-1052488119, 3] Size: 4 by call to `decode_nal_units`.

libavcodec/h264dec.c:883:17: Call
881.     }
882. 
883.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
884.     if (buf_index < 0)
885.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:670:11: Call
  668.     }
  669. 
  670.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  671.                                 h->nal_length_size, avctx->codec_id);
  672.     if (ret < 0) {

libavcodec/h2645_parse.c:260:15: Call
    258.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    259. 
    260.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    261.         if (ret < 0)
    262.             return ret;

libavcodec/get_bits.h:362:1: Parameter `bit_size`
      360.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      361.  */
      362. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      363.                                 int bit_size)
      364. {

libavcodec/get_bits.h:379:5: Assignment
      377.     s->size_in_bits       = bit_size;
      378. #if !UNCHECKED_BITSTREAM_READER
      379.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      380. #endif
      381.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264dec.c:883:17: Call
881.     }
882. 
883.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
884.     if (buf_index < 0)
885.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:656:1: Parameter `h->slice_ctx->intra16x16_pred_mode`
  654. }
  655. 
  656. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size)
       ^
  657. {
  658.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264dec.c:762:19: Call
  760. 
  761.         if (context_count == h->nb_slice_ctx) {
  762.             ret = ff_h264_execute_decode_slices(h, context_count);
                         ^
  763.             if (ret < 0 && (h->avctx->err_recognition & AV_EF_EXPLODE))
  764.                 goto end;

libavcodec/h264_slice.c:2324:1: Parameter `h->slice_ctx->intra16x16_pred_mode`
    2322.  * @param context_count number of contexts to execute
    2323.  */
    2324. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
          ^
    2325. {
    2326.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2338:15: Call
    2336.         h->postpone_filter = 0;
    2337. 
    2338.         ret = decode_slice(avctx, &h->slice_ctx[0]);
                        ^
    2339.         h->mb_y = h->slice_ctx[0].mb_y;
    2340.         return ret;

libavcodec/h264_slice.c:2129:1: Parameter `arg->intra16x16_pred_mode`
      2127. }
      2128. 
      2129. static int decode_slice(struct AVCodecContext *avctx, void *arg)
            ^
      2130. {
      2131.     H264SliceContext *sl = arg;

libavcodec/h264_slice.c:2173:19: Call
      2171.             }
      2172. 
      2173.             ret = ff_h264_decode_mb_cabac(h, sl);
                              ^
      2174.             // STOP_TIMER("decode_mb_cabac")
      2175. 

libavcodec/h264_cabac.c:1908:1: Parameter `sl->intra16x16_pred_mode`
        1906.  * @return 0 if OK, ER_AC_ERROR / ER_DC_ERROR / ER_MV_ERROR if an error is noticed
        1907.  */
        1908. int ff_h264_decode_mb_cabac(const H264Context *h, H264SliceContext *sl)
              ^
        1909. {
        1910.     const SPS *sps = h->ps.sps;

libavcodec/h264_cabac.c:2082:40: Call
        2080.                 return -1;
        2081.         } else {
        2082.             sl->intra16x16_pred_mode = ff_h264_check_intra_pred_mode(h->avctx, sl->top_samples_available,
                                                     ^
        2083.                                                                      sl->left_samples_available, sl->intra16x16_pred_mode, 0);
        2084.             if (sl->intra16x16_pred_mode < 0) return -1;

libavcodec/h264_parse.c:151:1: <Offset trace>
149.  * change the dc mode so it only uses the available blocks.
150.  */
151. int ff_h264_check_intra_pred_mode(void *logctx, int top_samples_available,
     ^
152.                                   int left_samples_available,
153.                                   int mode, int is_chroma)

libavcodec/h264_parse.c:151:1: Parameter `mode`
          149.  * change the dc mode so it only uses the available blocks.
          150.  */
          151. int ff_h264_check_intra_pred_mode(void *logctx, int top_samples_available,
               ^
          152.                                   int left_samples_available,
          153.                                   int mode, int is_chroma)

libavcodec/h264_parse.c:155:5: <Length trace>
153.                                   int mode, int is_chroma)
154. {
155.     static const int8_t top[4]  = { LEFT_DC_PRED8x8, 1, -1, -1 };
         ^
156.     static const int8_t left[5] = { TOP_DC_PRED8x8, -1,  2, -1, DC_128_PRED8x8 };
157. 

libavcodec/h264_parse.c:155:5: Array declaration
          153.                                   int mode, int is_chroma)
          154. {
          155.     static const int8_t top[4]  = { LEFT_DC_PRED8x8, 1, -1, -1 };
                   ^
          156.     static const int8_t left[5] = { TOP_DC_PRED8x8, -1,  2, -1, DC_128_PRED8x8 };
          157. 

libavcodec/h264_parse.c:165:16: Array access: Offset: [-1052488119, 3] Size: 4 by call to `decode_nal_units` 
          163. 
          164.     if (!(top_samples_available & 0x8000)) {
          165.         mode = top[mode];
                              ^
          166.         if (mode < 0) {
          167.             av_log(logctx, AV_LOG_ERROR,
