libavcodec/ffv1dec.c:393: error: Buffer Overrun L3
  Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame`.

libavcodec/ffv1dec.c:352:9: Call
350.         return ret;
351.     if (f->cur->key_frame)
352.         ffv1_clear_slice_state(f, fs);
             ^
353.     width  = fs->slice_width;
354.     height = fs->slice_height;

libavcodec/ffv1.c:256:17: Assignment
  254.             for (j = 0; j < p->context_count; j++) {
  255.                 p->vlc_state[j].drift     = 0;
  256.                 p->vlc_state[j].error_sum = 4;    //FFMAX((RANGE + 32)/64, 2);
                       ^
  257.                 p->vlc_state[j].bias      = 0;
  258.                 p->vlc_state[j].count     = 1;

libavcodec/ffv1dec.c:353:5: Assignment
351.     if (f->cur->key_frame)
352.         ffv1_clear_slice_state(f, fs);
353.     width  = fs->slice_width;
         ^
354.     height = fs->slice_height;
355.     x      = fs->slice_x;

libavcodec/ffv1dec.c:393:9: Call
391.                                p->data[1] + ps * x + y * p->linesize[1],
392.                                p->data[2] + ps * x + y * p->linesize[2] };
393.         decode_rgb_frame(fs, planes, width, height, p->linesize);
             ^
394.     }
395.     if (fs->ac && f->version > 2) {

libavcodec/ffv1dec.c:211:1: Array declaration
  209. }
  210. 
  211. static void decode_rgb_frame(FFV1Context *s, uint8_t *src[3], int w, int h,
       ^
  212.                              int stride[3])
  213. {

libavcodec/ffv1dec.c:241:17: Call
  239.             sample[p][0][w]  = sample[p][0][w - 1];
  240.             if (lbd)
  241.                 decode_line(s, w, sample[p], (p + 1) / 2, 9);
                       ^
  242.             else
  243.                 decode_line(s, w, sample[p], (p + 1) / 2, bits + 1);

libavcodec/ffv1dec.c:99:1: Parameter `w`
     97. }
     98. 
     99. static av_always_inline void decode_line(FFV1Context *s, int w,
         ^
    100.                                          int16_t *sample[2],
    101.                                          int plane_index, int bits)

libavcodec/ffv1dec.c:113:19: Call
    111.         int diff, context, sign;
    112. 
    113.         context = get_context(p, sample[1] + x, sample[0] + x, sample[1] + x);
                           ^
    114.         if (context < 0) {
    115.             context = -context;

libavcodec/ffv1.h:142:1: <Length trace>
140. }
141. 
142. static inline int get_context(PlaneContext *p, int16_t *src,
     ^
143.                               int16_t *last, int16_t *last2)
144. {

libavcodec/ffv1.h:142:1: Parameter `*src`
      140. }
      141. 
      142. static inline int get_context(PlaneContext *p, int16_t *src,
           ^
      143.                               int16_t *last, int16_t *last2)
      144. {

libavcodec/ffv1.h:152:24: Array access: Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame` 
      150.     if (p->quant_table[3][127]) {
      151.         const int TT = last2[0];
      152.         const int LL = src[-2];
                                  ^
      153.         return p->quant_table[0][(L - LT) & 0xFF] +
      154.                p->quant_table[1][(LT - T) & 0xFF] +
