libavformat/avs.c:195: error: Buffer Overrun L3
  Offset added: [-4, 772] Size: 6176 by call to `avs_read_video_packet`.

libavformat/avs.c:144:1: Array declaration
142. }
143. 
144. static int avs_read_packet(AVFormatContext * s, AVPacket * pkt)
     ^
145. {
146.     AvsFormat *avs = s->priv_data;

libavformat/avs.c:195:24: Call
193.                     avs->st_video->avg_frame_rate = (AVRational){avs->fps, 1};
194.                 }
195.                 return avs_read_video_packet(s, pkt, type, sub_type, size,
                            ^
196.                                              palette, palette_size);
197. 

libavformat/avs.c:85:1: <Offset trace>
83. }
84. 
85. static int
    ^
86. avs_read_video_packet(AVFormatContext * s, AVPacket * pkt,
87.                       AvsBlockType type, int sub_type, int size,

libavformat/avs.c:85:1: Parameter `palette_size`
  83. }
  84. 
  85. static int
      ^
  86. avs_read_video_packet(AVFormatContext * s, AVPacket * pkt,
  87.                       AvsBlockType type, int sub_type, int size,

libavformat/avs.c:85:1: <Length trace>
83. }
84. 
85. static int
    ^
86. avs_read_video_packet(AVFormatContext * s, AVPacket * pkt,
87.                       AvsBlockType type, int sub_type, int size,

libavformat/avs.c:85:1: Parameter `*palette`
  83. }
  84. 
  85. static int
      ^
  86. avs_read_video_packet(AVFormatContext * s, AVPacket * pkt,
  87.                       AvsBlockType type, int sub_type, int size,

libavformat/avs.c:102:9: Array access: Offset added: [-4, 772] Size: 6176 by call to `avs_read_video_packet` 
  100.         pkt->data[2] = palette_size & 0xFF;
  101.         pkt->data[3] = (palette_size >> 8) & 0xFF;
  102.         memcpy(pkt->data + 4, palette, palette_size - 4);
               ^
  103.     }
  104. 
