libavcodec/vp6.c:290: error: Buffer Overrun L2
  Offset: [0, 10] Size: 6 by call to `vp6_build_huff_tree`.

libavcodec/vp6.c:239:1: Parameter `s->modelp->coeff_ract[*][*][*]`
237. }
238. 
239. static void vp6_parse_coeff_models(VP56Context *s)
     ^
240. {
241.     VP56RangeCoder *c = &s->c;

libavcodec/vp6.c:290:21: Call
288.             for (ct=0; ct<3; ct++)
289.                 for (cg = 0; cg < 6; cg++)
290.                     vp6_build_huff_tree(s, model->coeff_ract[pt][ct][cg],
                         ^
291.                                         vp6_huff_coeff_map, 12,
292.                                         &s->ract_vlc[pt][ct][cg]);

libavcodec/vp6.c:218:1: <Offset trace>
216. }
217. 
218. static int vp6_build_huff_tree(VP56Context *s, uint8_t coeff_model[],
     ^
219.                                const uint8_t *map, unsigned size, VLC *vlc)
220. {

libavcodec/vp6.c:218:1: Parameter `size`
  216. }
  217. 
  218. static int vp6_build_huff_tree(VP56Context *s, uint8_t coeff_model[],
       ^
  219.                                const uint8_t *map, unsigned size, VLC *vlc)
  220. {

libavcodec/vp6.c:218:1: <Length trace>
216. }
217. 
218. static int vp6_build_huff_tree(VP56Context *s, uint8_t coeff_model[],
     ^
219.                                const uint8_t *map, unsigned size, VLC *vlc)
220. {

libavcodec/vp6.c:218:1: Parameter `*coeff_model`
  216. }
  217. 
  218. static int vp6_build_huff_tree(VP56Context *s, uint8_t coeff_model[],
       ^
  219.                                const uint8_t *map, unsigned size, VLC *vlc)
  220. {

libavcodec/vp6.c:227:35: Array access: Offset: [0, 10] Size: 6 by call to `vp6_build_huff_tree` 
  225.     tmp[0].count = 256;
  226.     for (i=0; i<size-1; i++) {
  227.         a = tmp[i].count *        coeff_model[i]  >> 8;
                                         ^
  228.         b = tmp[i].count * (255 - coeff_model[i]) >> 8;
  229.         nodes[map[2*i  ]].count = a + !a;
