libavcodec/h264_parser.c:242: error: Buffer Overrun L3
  Offset: [2, +oo] Size: [1, 2147483631] by call to `ff_h264_decode_sei`.

libavcodec/h264_parser.c:201:5: Call
199. 
200.     h->avctx = avctx;
201.     ff_h264_reset_sei(h);
         ^
202. 
203.     if (!buf_size)

libavcodec/h264_sei.c:47:5: Assignment
  45.     h->sei_reguserdata_afd_present  =  0;
  46. 
  47.     h->a53_caption_size = 0;
          ^
  48.     av_freep(&h->a53_caption);
  49. }

libavcodec/h264_parser.c:242:13: Call
240.             break;
241.         case NAL_SEI:
242.             ff_h264_decode_sei(h);
                 ^
243.             break;
244.         case NAL_IDR_SLICE:

libavcodec/h264_sei.c:308:1: Parameter `h->a53_caption_size`
  306. }
  307. 
  308. int ff_h264_decode_sei(H264Context *h)
       ^
  309. {
  310.     while (get_bits_left(&h->gb) > 16) {

libavcodec/h264_sei.c:340:19: Call
  338.             break;
  339.         case SEI_TYPE_USER_DATA_REGISTERED:
  340.             ret = decode_registered_user_data(h, size);
                         ^
  341.             break;
  342.         case SEI_TYPE_USER_DATA_UNREGISTERED:

libavcodec/h264_sei.c:109:1: <Offset trace>
107. }
108. 
109. static int decode_registered_user_data(H264Context *h, int size)
     ^
110. {
111.     uint32_t country_code;

libavcodec/h264_sei.c:109:1: Parameter `h->a53_caption_size`
    107. }
    108. 
    109. static int decode_registered_user_data(H264Context *h, int size)
         ^
    110. {
    111.     uint32_t country_code;

libavcodec/h264_sei.c:176:44: Assignment
    174. 
    175.                         for (i = 0; i < cc_count; i++) {
    176.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
                                                    ^
    177.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
    178.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);

libavcodec/h264_sei.c:177:44: Assignment
    175.                         for (i = 0; i < cc_count; i++) {
    176.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
    177.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
                                                    ^
    178.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
    179.                         }

libavcodec/h264_sei.c:157:32: <Length trace>
155.                 if (flag) {
156.                     skip_bits(&h->gb, 1);       // zero bit
157.                     cc_count = get_bits(&h->gb, 5);
                                    ^
158.                     skip_bits(&h->gb, 8);       // reserved
159.                     size -= 2;

libavcodec/h264_sei.c:157:32: Call
    155.                 if (flag) {
    156.                     skip_bits(&h->gb, 1);       // zero bit
    157.                     cc_count = get_bits(&h->gb, 5);
                                        ^
    158.                     skip_bits(&h->gb, 8);       // reserved
    159.                     size -= 2;

libavcodec/get_bits.h:245:5: Call
      243.     register int tmp;
      244.     OPEN_READER(re, s);
      245.     UPDATE_CACHE(re, s);
               ^
      246.     tmp = SHOW_UBITS(re, s, n);
      247.     LAST_SKIP_BITS(re, s, n);

libavutil/ppc/intreadwrite.h:63:5: Assignment
        61.     uint32_t v;
        62.     __asm__ ("lwbrx   %0, %y1" : "=r"(v) : "Z"(*(const uint32_t*)p));
        63.     return v;
                ^
        64. }
        65. 

libavcodec/get_bits.h:245:5: Assignment
      243.     register int tmp;
      244.     OPEN_READER(re, s);
      245.     UPDATE_CACHE(re, s);
               ^
      246.     tmp = SHOW_UBITS(re, s, n);
      247.     LAST_SKIP_BITS(re, s, n);

libavcodec/get_bits.h:246:5: Assignment
      244.     OPEN_READER(re, s);
      245.     UPDATE_CACHE(re, s);
      246.     tmp = SHOW_UBITS(re, s, n);
               ^
      247.     LAST_SKIP_BITS(re, s, n);
      248.     CLOSE_READER(re, s);

libavcodec/get_bits.h:249:5: Assignment
      247.     LAST_SKIP_BITS(re, s, n);
      248.     CLOSE_READER(re, s);
      249.     return tmp;
               ^
      250. }
      251. 

libavcodec/h264_sei.c:157:21: Assignment
    155.                 if (flag) {
    156.                     skip_bits(&h->gb, 1);       // zero bit
    157.                     cc_count = get_bits(&h->gb, 5);
                             ^
    158.                     skip_bits(&h->gb, 8);       // reserved
    159.                     size -= 2;

libavcodec/h264_sei.c:170:31: Call
    168. 
    169.                         /* Allow merging of the cc data from two fields. */
    170.                         ret = av_reallocp(&h->a53_caption,
                                       ^
    171.                                           h->a53_caption_size + cc_count * 3);
    172.                         if (ret < 0)

libavutil/mem.c:145:9: Call
      143. 
      144.     if (!size) {
      145.         av_freep(ptr);
                   ^
      146.         return 0;
      147.     }

libavutil/mem.c:207:26: Assignment
        205. 
        206.     memcpy(&val, arg, sizeof(val));
        207.     memcpy(arg, &(void *){ NULL }, sizeof(val));
                                      ^
        208.     av_free(val);
        209. }

libavcodec/h264_sei.c:178:29: Array access: Offset: [2, +oo] Size: [1, 2147483631] by call to `ff_h264_decode_sei` 
    176.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
    177.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
    178.                             h->a53_caption[h->a53_caption_size++] = get_bits(&h->gb, 8);
                                     ^
    179.                         }
    180. 
