libavcodec/h264dec.c:742: error: Buffer Overrun L2
  Offset: [0, 2147483648] Size: 3 by call to `decode_nal_units`.

libavcodec/h264dec.c:742:17: Call
740.     }
741. 
742.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
743.     if (buf_index < 0)
744.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:528:11: Call
  526.     }
  527. 
  528.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                 ^
  529.                                 h->nal_length_size, avctx->codec_id);
  530.     if (ret < 0) {

libavcodec/h2645_parse.c:301:15: Call
    299.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    300. 
    301.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    302.         if (ret < 0)
    303.             return ret;

libavcodec/get_bits.h:362:1: Parameter `bit_size`
      360.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      361.  */
      362. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      363.                                 int bit_size)
      364. {

libavcodec/get_bits.h:379:5: Assignment
      377.     s->size_in_bits       = bit_size;
      378. #if !UNCHECKED_BITSTREAM_READER
      379.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      380. #endif
      381.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264dec.c:742:17: Call
740.     }
741. 
742.     buf_index = decode_nal_units(h, buf, buf_size);
                     ^
743.     if (buf_index < 0)
744.         return AVERROR_INVALIDDATA;

libavcodec/h264dec.c:515:1: Parameter `h->slice_ctx->cabac_init_idc`
  513. }
  514. 
  515. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size)
       ^
  516. {
  517.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264dec.c:633:11: Call
  631.     }
  632. 
  633.     ret = ff_h264_execute_decode_slices(h);
                 ^
  634.     if (ret < 0 && (h->avctx->err_recognition & AV_EF_EXPLODE))
  635.         goto end;

libavcodec/h264_slice.c:2488:1: Parameter `h->slice_ctx->cabac_init_idc`
    2486.  * @param h h264 master context
    2487.  */
    2488. int ff_h264_execute_decode_slices(H264Context *h)
          ^
    2489. {
    2490.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2503:15: Call
    2501.         h->postpone_filter = 0;
    2502. 
    2503.         ret = decode_slice(avctx, &h->slice_ctx[0]);
                        ^
    2504.         h->mb_y = h->slice_ctx[0].mb_y;
    2505.         if (ret < 0)

libavcodec/h264_slice.c:2294:1: Parameter `arg->cabac_init_idc`
      2292. }
      2293. 
      2294. static int decode_slice(struct AVCodecContext *avctx, void *arg)
            ^
      2295. {
      2296.     H264SliceContext *sl = arg;

libavcodec/h264_slice.c:2326:9: Call
      2324.                               (get_bits_left(&sl->gb) + 7) / 8);
      2325. 
      2326.         ff_h264_init_cabac_states(h, sl);
                    ^
      2327. 
      2328.         for (;;) {

libavcodec/h264_cabac.c:1263:1: <Offset trace>
1261. };
1262. 
1263. void ff_h264_init_cabac_states(const H264Context *h, H264SliceContext *sl)
      ^
1264. {
1265.     int i;

libavcodec/h264_cabac.c:1263:1: Parameter `sl->cabac_init_idc`
        1261. };
        1262. 
        1263. void ff_h264_init_cabac_states(const H264Context *h, H264SliceContext *sl)
              ^
        1264. {
        1265.     int i;

libavcodec/h264_cabac.c:363:1: <Length trace>
361. };
362. 
363. static const int8_t cabac_context_init_PB[3][1024][2] =
     ^
364. {
365.     /* i_cabac_init_idc == 0 */

libavcodec/h264_cabac.c:363:1: Array declaration
        361. };
        362. 
        363. static const int8_t cabac_context_init_PB[3][1024][2] =
             ^
        364. {
        365.     /* i_cabac_init_idc == 0 */

libavcodec/h264_cabac.c:1270:42: Array access: Offset: [0, 2147483648] Size: 3 by call to `decode_nal_units` 
        1268. 
        1269.     if (sl->slice_type_nos == AV_PICTURE_TYPE_I) tab = cabac_context_init_I;
        1270.     else                                 tab = cabac_context_init_PB[sl->cabac_init_idc];
                                                       ^
        1271. 
        1272.     /* calculate pre-state */
