libavcodec/h264.h:1265: error: Buffer Overrun L1
  Offset: [2, `h->list_count` + 19] (⇐ [2, 20] + [0, `h->list_count` - 1]) Size: 2.

libavcodec/h264.h:1170:1: <Offset trace>
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: Parameter `h->list_count`
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: <Length trace>
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: Parameter `h->ref2frm[*][*]`
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1264:17: Assignment
1262.             ref = &s->current_picture.ref_index[list][4*mb_xy];
1263.             {
1264.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
                      ^
1265.                 AV_WN32A(&h->ref_cache[list][scan8[ 0]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
1266.                 AV_WN32A(&h->ref_cache[list][scan8[ 2]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);

libavcodec/h264.h:1265:17: Array access: Offset: [2, h->list_count + 19] (⇐ [2, 20] + [0, h->list_count - 1]) Size: 2
1263.             {
1264.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
1265.                 AV_WN32A(&h->ref_cache[list][scan8[ 0]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
                      ^
1266.                 AV_WN32A(&h->ref_cache[list][scan8[ 2]], (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101);
1267.                 ref += 2;
