libavcodec/h264.c:6735: error: Buffer Overrun L2
  Offset: [-oo, 12+max(51, `h->s.qscale`)] Size: 52 by call to `hl_decode_mb`.

libavcodec/h264.c:6698:1: Parameter `h->s.qscale`
6696. }
6697. 
6698. static int decode_slice(struct AVCodecContext *avctx, H264Context *h){
      ^
6699.     MpegEncContext * const s = &h->s;
6700.     const int part_mask= s->partitioned_frame ? (AC_END|AC_ERROR) : 0x7F;

libavcodec/h264.c:6731:23: Call
6729.         for(;;){
6730. //START_TIMER
6731.             int ret = decode_mb_cabac(h);
                            ^
6732.             int eos;
6733. //STOP_TIMER("decode_mb_cabac")

libavcodec/h264.c:5459:1: Parameter `h->s.qscale`
  5457.  * @returns 0 if OK, AC_ERROR / DC_ERROR / MV_ERROR if an error is noticed
  5458.  */
  5459. static int decode_mb_cabac(H264Context *h) {
        ^
  5460.     MpegEncContext * const s = &h->s;
  5461.     int mb_xy;

libavcodec/h264.c:6735:24: Call
6733. //STOP_TIMER("decode_mb_cabac")
6734. 
6735.             if(ret>=0) hl_decode_mb(h);
                             ^
6736. 
6737.             if( ret >= 0 && FRAME_MBAFF ) { //FIXME optimal? or let mb_decode decode 16x32 ?

libavcodec/h264.c:2721:1: Parameter `h->s.qscale`
  2719. }
  2720. 
  2721. static void hl_decode_mb(H264Context *h){
        ^
  2722.     MpegEncContext * const s = &h->s;
  2723.     const int mb_xy= h->mb_xy;

libavcodec/h264.c:2732:9: Call
  2730. 
  2731.     if (is_complex)
  2732.         hl_decode_mb_complex(h);
                ^
  2733.     else hl_decode_mb_simple(h);
  2734. }

libavcodec/h264.c:2717:1: Parameter `h->s.qscale`
    2715.  * Process a macroblock; this handles edge cases, such as interlacing.
    2716.  */
    2717. static void av_noinline hl_decode_mb_complex(H264Context *h){
          ^
    2718.     hl_decode_mb_internal(h, 0);
    2719. }

libavcodec/h264.c:2718:5: Call
    2716.  */
    2717. static void av_noinline hl_decode_mb_complex(H264Context *h){
    2718.     hl_decode_mb_internal(h, 0);
              ^
    2719. }
    2720. 

libavcodec/h264.c:2429:1: <Offset trace>
2427. }
2428. 
2429. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
      ^
2430.     MpegEncContext * const s = &h->s;
2431.     const int mb_x= s->mb_x;

libavcodec/h264.c:2429:1: Parameter `h->s.qscale`
      2427. }
      2428. 
      2429. static av_always_inline void hl_decode_mb_internal(H264Context *h, int simple){
            ^
      2430.     MpegEncContext * const s = &h->s;
      2431.     const int mb_x= s->mb_x;

libavcodec/h264data.h:83:1: <Length trace>
81. {-1, 2, 0, 1, -1, 4, 3};
82. 
83. static const uint8_t chroma_qp[52]={
    ^
84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264data.h:83:1: Array declaration
      81. {-1, 2, 0, 1, -1, 4, 3};
      82. 
      83. static const uint8_t chroma_qp[52]={
          ^
      84.     0, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,
      85.    12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,

libavcodec/h264.c:2657:72: Array access: Offset: [-oo, 12+max(51, h->s.qscale)] Size: 52 by call to `hl_decode_mb` 
      2655.                     if(h->non_zero_count_cache[ scan8[i] ] || h->mb[i*16]){
      2656.                         uint8_t * const ptr= dest[(i&4)>>2] + block_offset[i];
      2657.                         svq3_add_idct_c(ptr, h->mb + i*16, uvlinesize, chroma_qp[s->qscale + 12] - 12, 2);
                                                                                   ^
      2658.                     }
      2659.                 }
