libavcodec/h264.c:1684: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: 16 by call to `decode_nal_units`.

libavcodec/h264.c:1635:1: Parameter `avctx->priv_data->slice_context_count`
1633. }
1634. 
1635. static int h264_decode_frame(AVCodecContext *avctx, void *data,
      ^
1636.                              int *got_frame, AVPacket *avpkt)
1637. {

libavcodec/h264.c:1684:17: Call
1682.     }
1683. 
1684.     buf_index = decode_nal_units(h, buf, buf_size, 0);
                      ^
1685.     if (buf_index < 0)
1686.         return AVERROR_INVALIDDATA;

libavcodec/h264.c:1307:9: Assignment
  1305.     for (; pass <= 1; pass++) {
  1306.         buf_index     = 0;
  1307.         context_count = 0;
                ^
  1308.         next_avc      = h->is_avc ? 0 : buf_size;
  1309.         nal_index     = 0;

libavcodec/h264.c:1570:17: Call
  1568. 
  1569.             if (context_count == h->max_contexts) {
  1570.                 ff_h264_execute_decode_slices(h, context_count);
                        ^
  1571.                 context_count = 0;
  1572.             }

libavcodec/h264_slice.c:2348:1: <Offset trace>
2346.  * @param context_count number of contexts to execute
2347.  */
2348. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
      ^
2349. {
2350.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2348:1: Parameter `context_count`
    2346.  * @param context_count number of contexts to execute
    2347.  */
    2348. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
          ^
    2349. {
    2350.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2348:1: <Length trace>
2346.  * @param context_count number of contexts to execute
2347.  */
2348. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
      ^
2349. {
2350.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2348:1: Parameter `h->thread_context[*]`
    2346.  * @param context_count number of contexts to execute
    2347.  */
    2348. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
          ^
    2349. {
    2350.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2374:32: Array access: Offset: [-1, +oo] Size: 16 by call to `decode_nal_units` 
    2372. 
    2373.         /* pull back stuff from slices to master context */
    2374.         hx                   = h->thread_context[context_count - 1];
                                         ^
    2375.         h->mb_x              = hx->mb_x;
    2376.         h->mb_y              = hx->mb_y;
