libavcodec/wmv2.c:70: error: Buffer Overrun L1
  Offset: [12, 36] (⇐ [5, 29] + 7) Size: 6 by call to `wmv2_add_block`.

libavcodec/wmv2.c:70:5: Call
68. 
69.     wmv2_add_block(w, block1[4], dest_cb                   , s->uvlinesize, 4);
70.     wmv2_add_block(w, block1[5], dest_cr                   , s->uvlinesize, 5);
        ^
71. }
72. 

libavcodec/wmv2.c:35:1: Parameter `n`
  33. }
  34. 
  35. static void wmv2_add_block(Wmv2Context *w, DCTELEM *block1, uint8_t *dst, int stride, int n){
      ^
  36.     MpegEncContext * const s= &w->s;
  37. 

libavcodec/wmv2.c:45:9: Call
  43.     case 1:
  44.         ff_simple_idct84_add(dst           , stride, block1);
  45.         ff_simple_idct84_add(dst + 4*stride, stride, w->abt_block2[n]);
              ^
  46.         s->dsp.clear_block(w->abt_block2[n]);
  47.         break;

libavcodec/simple_idct.c:558:1: Parameter `*block`
    556. }
    557. 
    558. void ff_simple_idct84_add(uint8_t *dest, int line_size, DCTELEM *block)
         ^
    559. {
    560.     int i;

libavcodec/simple_idct.c:564:9: Call
    562.     /* IDCT8 on each line */
    563.     for(i=0; i<4; i++) {
    564.         idctRowCondDC(block + i*8);
                 ^
    565.     }
    566. 

libavcodec/simple_idct.c:78:1: <Length trace>
76. #endif
77. 
78. static inline void idctRowCondDC (DCTELEM * row)
    ^
79. {
80.         int a0, a1, a2, a3, b0, b1, b2, b3;

libavcodec/simple_idct.c:78:1: Parameter `*row`
      76. #endif
      77. 
      78. static inline void idctRowCondDC (DCTELEM * row)
          ^
      79. {
      80.         int a0, a1, a2, a3, b0, b1, b2, b3;

libavcodec/simple_idct.c:161:13: Array access: Offset: [12, 36] (⇐ [5, 29] + 7) Size: 6 by call to `wmv2_add_block` 
      159. 
      160.             MAC16(b0, W5, row[5]);
      161.             MAC16(b0, W7, row[7]);
                       ^
      162. 
      163.             MAC16(b1, -W1, row[5]);
