libavcodec/ffv1.c:1609: error: Buffer Overrun L2
  Offset: [22, 62] Size: 32 by call to `get_symbol`.

libavcodec/ffv1.c:1553:1: Array declaration
1551. }
1552. 
1553. static int read_extra_header(FFV1Context *f)
      ^
1554. {
1555.     RangeCoder *const c = &f->c;

libavcodec/ffv1.c:1609:33: Call
1607.                     int pred = j ? f->initial_states[i][j - 1][k] : 128;
1608.                     f->initial_states[i][j][k] =
1609.                         (pred + get_symbol(c, state2[k], 1)) & 0xFF;
                                      ^
1610.                 }
1611.     return 0;

libavcodec/ffv1.c:358:1: Parameter `*state`
  356. }
  357. 
  358. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
       ^
  359. {
  360.     return get_symbol_inline(c, state, is_signed);

libavcodec/ffv1.c:360:12: Call
  358. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
  359. {
  360.     return get_symbol_inline(c, state, is_signed);
                  ^
  361. }
  362. 

libavcodec/ffv1.c:338:1: Parameter `*state`
    336. }
    337. 
    338. static inline av_flatten int get_symbol_inline(RangeCoder *c, uint8_t *state,
         ^
    339.                                                int is_signed)
    340. {

libavcodec/ffv1.c:351:22: Call
    349.         a = 1;
    350.         for (i = e - 1; i >= 0; i--)
    351.             a += a + get_rac(c, state + 22 + FFMIN(i, 9));  // 22..31
                              ^
    352. 
    353.         e = -(is_signed && get_rac(c, state + 11 + FFMIN(e, 10))); // 11..21

libavcodec/rangecoder.h:115:1: <Length trace>
113. }
114. 
115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
     ^
116. {
117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:115:1: Parameter `*state`
      113. }
      114. 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
           ^
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:117:30: Array access: Offset: [22, 62] Size: 32 by call to `get_symbol` 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;
                                        ^
      118.     int av_unused one_mask;
      119. 
