libavcodec/huffyuv.c:296: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `init_vlc_sparse`.

libavcodec/huffyuv.c:292:25: Assignment
290.                     symbols[i] = (y<<8) + u;
291.                     if(symbols[i] != 0xffff) // reserved to mean "invalid"
292.                         i++;
                             ^
293.                 }
294.             }

libavcodec/huffyuv.c:296:13: Call
294.             }
295.             free_vlc(&s->vlc[3+p]);
296.             init_vlc_sparse(&s->vlc[3+p], VLC_BITS, i, len, 1, 1, bits, 2, 2, symbols, 2, 2, 0);
                 ^
297.         }
298.     }else{

libavcodec/bitstream.c:272:1: Parameter `nb_codes`
  270.    with av_free_static(), 0 if free_vlc() will be used.
  271. */
  272. int init_vlc_sparse(VLC *vlc, int nb_bits, int nb_codes,
       ^
  273.              const void *bits, int bits_wrap, int bits_size,
  274.              const void *codes, int codes_wrap, int codes_size,

libavcodec/bitstream.c:278:17: Array declaration
  276.              int flags)
  277. {
  278.     VLCcode buf[nb_codes];
                       ^
  279.     int i, j;
  280. 

libavcodec/bitstream.c:322:9: Call
  320.     nb_codes = j;
  321. 
  322.     if (build_table(vlc, nb_bits, nb_codes, buf, flags) < 0) {
               ^
  323.         av_freep(&vlc->table);
  324.         return -1;

libavcodec/bitstream.c:155:1: <Offset trace>
153.  *                       Sorting by VLCcode.code is sufficient, though not necessary.
154.  */
155. static int build_table(VLC *vlc, int table_nb_bits, int nb_codes,
     ^
156.                        VLCcode *codes, int flags)
157. {

libavcodec/bitstream.c:155:1: Parameter `nb_codes`
    153.  *                       Sorting by VLCcode.code is sufficient, though not necessary.
    154.  */
    155. static int build_table(VLC *vlc, int table_nb_bits, int nb_codes,
         ^
    156.                        VLCcode *codes, int flags)
    157. {

libavcodec/bitstream.c:155:1: <Length trace>
153.  *                       Sorting by VLCcode.code is sufficient, though not necessary.
154.  */
155. static int build_table(VLC *vlc, int table_nb_bits, int nb_codes,
     ^
156.                        VLCcode *codes, int flags)
157. {

libavcodec/bitstream.c:155:1: Parameter `*codes`
    153.  *                       Sorting by VLCcode.code is sufficient, though not necessary.
    154.  */
    155. static int build_table(VLC *vlc, int table_nb_bits, int nb_codes,
         ^
    156.                        VLCcode *codes, int flags)
    157. {

libavcodec/bitstream.c:216:21: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `init_vlc_sparse` 
    214.             codes[i].code = code << table_nb_bits;
    215.             for (k = i+1; k < nb_codes; k++) {
    216.                 n = codes[k].bits - table_nb_bits;
                             ^
    217.                 if (n <= 0)
    218.                     break;
