libavcodec/h264_direct.c:150: error: Buffer Overrun L2
  Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap`.

libavcodec/h264_direct.c:107:1: Parameter `h->map_col_to_list0_field[*]`
105. }
106. 
107. void ff_h264_direct_ref_list_init(H264Context *const h)
     ^
108. {
109.     H264Picture *const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:150:17: Call
148.         if (FRAME_MBAFF(h))
149.             for (field = 0; field < 2; field++)
150.                 fill_colmap(h, h->map_col_to_list0_field[field], list, field,
                     ^
151.                             field, 1);
152.     }

libavcodec/h264_direct.c:70:1: <Offset trace>
68. }
69. 
70. static void fill_colmap(H264Context *h, int map[2][16 + 32], int list,
    ^
71.                         int field, int colfield, int mbafi)
72. {

libavcodec/h264_direct.c:70:1: Parameter `list`
  68. }
  69. 
  70. static void fill_colmap(H264Context *h, int map[2][16 + 32], int list,
      ^
  71.                         int field, int colfield, int mbafi)
  72. {

libavcodec/h264_direct.c:70:1: <Length trace>
68. }
69. 
70. static void fill_colmap(H264Context *h, int map[2][16 + 32], int list,
    ^
71.                         int field, int colfield, int mbafi)
72. {

libavcodec/h264_direct.c:70:1: Parameter `*map`
  68. }
  69. 
  70. static void fill_colmap(H264Context *h, int map[2][16 + 32], int list,
      ^
  71.                         int field, int colfield, int mbafi)
  72. {

libavcodec/h264_direct.c:97:25: Array access: Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap` 
  95.                     int cur_ref = mbafi ? (j - 16) ^ field : j;
  96.                     if (ref1->mbaff)
  97.                         map[list][2 * old_ref + (rfield ^ field) + 16] = cur_ref;
                              ^
  98.                     if (rfield == field || !interl)
  99.                         map[list][old_ref] = cur_ref;
