libavcodec/h264.c:1424: error: Buffer Overrun L3
  Offset: [-1052488119, 4] Size: 5 by call to `decode_nal_units`.

libavcodec/h264.c:1424:17: Call
1422.     }
1423. 
1424.     buf_index = decode_nal_units(h, buf, buf_size, 0);
                      ^
1425.     if (buf_index < 0)
1426.         return AVERROR_INVALIDDATA;

libavcodec/h264.c:1174:11: Call
  1172.     }
  1173. 
  1174.     ret = ff_h2645_packet_split(&h->pkt, buf, buf_size, avctx, h->is_avc,
                  ^
  1175.                                 h->nal_length_size, avctx->codec_id);
  1176.     if (ret < 0) {

libavcodec/h2645_parse.c:260:15: Call
    258.         nal->size_bits = get_bit_length(nal, skip_trailing_zeros);
    259. 
    260.         ret = init_get_bits(&nal->gb, nal->data, nal->size_bits);
                       ^
    261.         if (ret < 0)
    262.             return ret;

libavcodec/get_bits.h:384:1: Parameter `bit_size`
      382.  * @return 0 on success, AVERROR_INVALIDDATA if the buffer_size would overflow.
      383.  */
      384. static inline int init_get_bits(GetBitContext *s, const uint8_t *buffer,
           ^
      385.                                 int bit_size)
      386. {

libavcodec/get_bits.h:401:5: Assignment
      399.     s->size_in_bits       = bit_size;
      400. #if !UNCHECKED_BITSTREAM_READER
      401.     s->size_in_bits_plus8 = bit_size + 8;
               ^
      402. #endif
      403.     s->buffer_end         = buffer + buffer_size;

libavcodec/h264.c:1424:17: Call
1422.     }
1423. 
1424.     buf_index = decode_nal_units(h, buf, buf_size, 0);
                      ^
1425.     if (buf_index < 0)
1426.         return AVERROR_INVALIDDATA;

libavcodec/h264.c:1158:1: Parameter `h->slice_ctx->intra16x16_pred_mode`
  1156. }
  1157. 
  1158. static int decode_nal_units(H264Context *h, const uint8_t *buf, int buf_size,
        ^
  1159.                             int parse_extradata)
  1160. {

libavcodec/h264.c:1328:15: Call
  1326.     }
  1327.     if (context_count) {
  1328.         ret = ff_h264_execute_decode_slices(h, context_count);
                      ^
  1329.         if (ret < 0 && (h->avctx->err_recognition & AV_EF_EXPLODE))
  1330.             goto end;

libavcodec/h264_slice.c:2226:1: Parameter `h->slice_ctx->intra16x16_pred_mode`
    2224.  * @param context_count number of contexts to execute
    2225.  */
    2226. int ff_h264_execute_decode_slices(H264Context *h, unsigned context_count)
          ^
    2227. {
    2228.     AVCodecContext *const avctx = h->avctx;

libavcodec/h264_slice.c:2239:15: Call
    2237.         h->slice_ctx[0].next_slice_idx = h->mb_width * h->mb_height;
    2238. 
    2239.         ret = decode_slice(avctx, &h->slice_ctx[0]);
                        ^
    2240.         h->mb_y = h->slice_ctx[0].mb_y;
    2241.         return ret;

libavcodec/h264_slice.c:2038:1: Parameter `arg->intra16x16_pred_mode`
      2036. }
      2037. 
      2038. static int decode_slice(struct AVCodecContext *avctx, void *arg)
            ^
      2039. {
      2040.     H264SliceContext *sl = arg;

libavcodec/h264_slice.c:2079:19: Call
      2077.             }
      2078. 
      2079.             ret = ff_h264_decode_mb_cabac(h, sl);
                              ^
      2080.             // STOP_TIMER("decode_mb_cabac")
      2081. 

libavcodec/h264_cabac.c:1909:1: Parameter `sl->intra16x16_pred_mode`
        1907.  * @return 0 if OK, ER_AC_ERROR / ER_DC_ERROR / ER_MV_ERROR if an error is noticed
        1908.  */
        1909. int ff_h264_decode_mb_cabac(const H264Context *h, H264SliceContext *sl)
              ^
        1910. {
        1911.     int mb_xy;

libavcodec/h264_cabac.c:2083:40: Call
        2081.                 return -1;
        2082.         } else {
        2083.             sl->intra16x16_pred_mode = ff_h264_check_intra_pred_mode(h->avctx, sl->top_samples_available,
                                                     ^
        2084.                                                                      sl->left_samples_available, sl->intra16x16_pred_mode, 0);
        2085.             if (sl->intra16x16_pred_mode < 0) return -1;

libavcodec/h264_parse.c:140:1: <Offset trace>
138.  * change the dc mode so it only uses the available blocks.
139.  */
140. int ff_h264_check_intra_pred_mode(void *logctx, int top_samples_available,
     ^
141.                                   int left_samples_available,
142.                                   int mode, int is_chroma)

libavcodec/h264_parse.c:140:1: Parameter `mode`
          138.  * change the dc mode so it only uses the available blocks.
          139.  */
          140. int ff_h264_check_intra_pred_mode(void *logctx, int top_samples_available,
               ^
          141.                                   int left_samples_available,
          142.                                   int mode, int is_chroma)

libavcodec/h264_parse.c:145:5: <Length trace>
143. {
144.     static const int8_t top[4]  = { LEFT_DC_PRED8x8, 1, -1, -1 };
145.     static const int8_t left[5] = { TOP_DC_PRED8x8, -1,  2, -1, DC_128_PRED8x8 };
         ^
146. 
147.     if (mode > 3U) {

libavcodec/h264_parse.c:145:5: Array declaration
          143. {
          144.     static const int8_t top[4]  = { LEFT_DC_PRED8x8, 1, -1, -1 };
          145.     static const int8_t left[5] = { TOP_DC_PRED8x8, -1,  2, -1, DC_128_PRED8x8 };
                   ^
          146. 
          147.     if (mode > 3U) {

libavcodec/h264_parse.c:163:16: Array access: Offset: [-1052488119, 4] Size: 5 by call to `decode_nal_units` 
          161. 
          162.     if ((left_samples_available & 0x8080) != 0x8080) {
          163.         mode = left[mode];
                              ^
          164.         if (is_chroma && (left_samples_available & 0x8080)) {
          165.             // mad cow disease mode, aka MBAFF + constrained_intra_pred
