libavcodec/mjpegbdec.c:116: error: Buffer Overrun L2
  Offset: [0, max(4, `avctx->priv_data->nb_components`)] Size: 4 by call to `ff_mjpeg_decode_sos`.

libavcodec/mjpegbdec.c:40:1: Parameter `avctx->priv_data->nb_components`
38. }
39. 
40. static int mjpegb_decode_frame(AVCodecContext *avctx,
    ^
41.                               void *data, int *data_size,
42.                               AVPacket *avpkt)

libavcodec/mjpegbdec.c:116:9: Call
114.         s->mjpb_skiptosod = (sod_offs - sos_offs - show_bits(&s->gb, 16));
115.         s->start_code = SOS;
116.         ff_mjpeg_decode_sos(s);
             ^
117.     }
118. 

libavcodec/mjpegdec.c:885:1: <Offset trace>
883. }
884. 
885. int ff_mjpeg_decode_sos(MJpegDecodeContext *s)
     ^
886. {
887.     int len, nb_components, i, h, v, predictor, point_transform;

libavcodec/mjpegdec.c:885:1: Parameter `s->nb_components`
  883. }
  884. 
  885. int ff_mjpeg_decode_sos(MJpegDecodeContext *s)
       ^
  886. {
  887.     int len, nb_components, i, h, v, predictor, point_transform;

libavcodec/mjpegdec.c:885:1: <Length trace>
883. }
884. 
885. int ff_mjpeg_decode_sos(MJpegDecodeContext *s)
     ^
886. {
887.     int len, nb_components, i, h, v, predictor, point_transform;

libavcodec/mjpegdec.c:885:1: Parameter `s->h_count[*]`
  883. }
  884. 
  885. int ff_mjpeg_decode_sos(MJpegDecodeContext *s)
       ^
  886. {
  887.     int len, nb_components, i, h, v, predictor, point_transform;

libavcodec/mjpegdec.c:915:27: Array access: Offset: [0, max(4, avctx->priv_data->nb_components)] Size: 4 by call to `ff_mjpeg_decode_sos` 
  913.         s->comp_index[i] = index;
  914. 
  915.         s->nb_blocks[i] = s->h_count[index] * s->v_count[index];
                                 ^
  916.         s->h_scount[i] = s->h_count[index];
  917.         s->v_scount[i] = s->v_count[index];
