libavcodec/cavs.c:491: error: Buffer Overrun L2
  Offset: [1, 16] (⇐ 1 + [0, 15]) Size: 2 by call to `mc_part_std`.

libavcodec/cavs.c:481:1: Parameter `h->cdsp.put_cavs_qpel_pixels_tab[*]`
479. }
480. 
481. void ff_cavs_inter(AVSContext *h, enum cavs_mb mb_type)
     ^
482. {
483.     if (ff_cavs_partition_flags[mb_type] == 0) { // 16x16

libavcodec/cavs.c:491:9: Call
489.                     &h->mv[MV_FWD_X0]);
490.     } else {
491.         mc_part_std(h, 4, 0, h->cy, h->cu, h->cv, 0, 0,
             ^
492.                     h->cdsp.put_cavs_qpel_pixels_tab[1],
493.                     h->h264chroma.put_h264_chroma_pixels_tab[1],

libavcodec/cavs.c:443:1: Parameter `*qpix_put`
  441. }
  442. 
  443. static inline void mc_part_std(AVSContext *h, int chroma_height, int delta,
       ^
  444.                                uint8_t *dest_y,
  445.                                uint8_t *dest_cb,

libavcodec/cavs.c:454:5: Assignment
  452.                                cavs_vector *mv)
  453. {
  454.     qpel_mc_func *qpix_op =  qpix_put;
           ^
  455.     h264_chroma_mc_func chroma_op = chroma_put;
  456. 

libavcodec/cavs.c:465:9: Call
  463.     if (mv->ref >= 0) {
  464.         AVFrame *ref = h->DPB[mv->ref].f;
  465.         mc_dir_part(h, ref, chroma_height, delta, 0,
               ^
  466.                     dest_y, dest_cb, dest_cr, x_offset, y_offset,
  467.                     qpix_op, chroma_op, mv);

libavcodec/cavs.c:378:1: <Offset trace>
376.  ****************************************************************************/
377. 
378. static inline void mc_dir_part(AVSContext *h, AVFrame *pic, int chroma_height,
     ^
379.                                int delta, int list, uint8_t *dest_y,
380.                                uint8_t *dest_cb, uint8_t *dest_cr,

libavcodec/cavs.c:378:1: Parameter `src_x_offset`
    376.  ****************************************************************************/
    377. 
    378. static inline void mc_dir_part(AVSContext *h, AVFrame *pic, int chroma_height,
         ^
    379.                                int delta, int list, uint8_t *dest_y,
    380.                                uint8_t *dest_cb, uint8_t *dest_cr,

libavcodec/cavs.c:385:5: Assignment
    383.                                h264_chroma_mc_func chroma_op, cavs_vector *mv)
    384. {
    385.     const int mx         = mv->x + src_x_offset * 8;
             ^
    386.     const int my         = mv->y + src_y_offset * 8;
    387.     const int luma_xy    = (mx & 3) + ((my & 3) << 2);

libavcodec/cavs.c:387:5: Assignment
    385.     const int mx         = mv->x + src_x_offset * 8;
    386.     const int my         = mv->y + src_y_offset * 8;
    387.     const int luma_xy    = (mx & 3) + ((my & 3) << 2);
             ^
    388.     uint8_t *src_y       = pic->data[0] + (mx >> 2) + (my >> 2) * h->l_stride;
    389.     uint8_t *src_cb      = pic->data[1] + (mx >> 3) + (my >> 3) * h->c_stride;

libavcodec/cavs.c:378:1: <Length trace>
376.  ****************************************************************************/
377. 
378. static inline void mc_dir_part(AVSContext *h, AVFrame *pic, int chroma_height,
     ^
379.                                int delta, int list, uint8_t *dest_y,
380.                                uint8_t *dest_cb, uint8_t *dest_cr,

libavcodec/cavs.c:378:1: Parameter `*qpix_op`
    376.  ****************************************************************************/
    377. 
    378. static inline void mc_dir_part(AVSContext *h, AVFrame *pic, int chroma_height,
         ^
    379.                                int delta, int list, uint8_t *dest_y,
    380.                                uint8_t *dest_cb, uint8_t *dest_cr,

libavcodec/cavs.c:420:5: Array access: Offset: [1, 16] (⇐ 1 + [0, 15]) Size: 2 by call to `mc_part_std` 
    418. 
    419.     // FIXME try variable height perhaps?
    420.     qpix_op[luma_xy](dest_y, src_y, h->l_stride);
             ^
    421. 
    422.     if (emu) {
