libavcodec/ffv1dec.c:402: error: Buffer Overrun L3
  Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame`.

libavcodec/ffv1dec.c:361:9: Call
359.         return ret;
360.     if (f->cur->key_frame)
361.         ffv1_clear_slice_state(f, fs);
             ^
362.     width  = fs->slice_width;
363.     height = fs->slice_height;

libavcodec/ffv1.c:269:17: Assignment
  267.             for (j = 0; j < p->context_count; j++) {
  268.                 p->vlc_state[j].drift     = 0;
  269.                 p->vlc_state[j].error_sum = 4;    //FFMAX((RANGE + 32)/64, 2);
                       ^
  270.                 p->vlc_state[j].bias      = 0;
  271.                 p->vlc_state[j].count     = 1;

libavcodec/ffv1dec.c:362:5: Assignment
360.     if (f->cur->key_frame)
361.         ffv1_clear_slice_state(f, fs);
362.     width  = fs->slice_width;
         ^
363.     height = fs->slice_height;
364.     x      = fs->slice_x;

libavcodec/ffv1dec.c:402:9: Call
400.                                p->data[1] + ps * x + y * p->linesize[1],
401.                                p->data[2] + ps * x + y * p->linesize[2] };
402.         decode_rgb_frame(fs, planes, width, height, p->linesize);
             ^
403.     }
404.     if (fs->ac != AC_GOLOMB_RICE && f->version > 2) {

libavcodec/ffv1dec.c:212:1: Array declaration
  210. }
  211. 
  212. static void decode_rgb_frame(FFV1Context *s, uint8_t *src[3], int w, int h,
       ^
  213.                              int stride[3])
  214. {

libavcodec/ffv1dec.c:242:17: Call
  240.             sample[p][0][w]  = sample[p][0][w - 1];
  241.             if (lbd)
  242.                 decode_line(s, w, sample[p], (p + 1) / 2, 9);
                       ^
  243.             else
  244.                 decode_line(s, w, sample[p], (p + 1) / 2, bits + 1);

libavcodec/ffv1dec.c:100:1: Parameter `w`
     98. }
     99. 
    100. static av_always_inline void decode_line(FFV1Context *s, int w,
         ^
    101.                                          int16_t *sample[2],
    102.                                          int plane_index, int bits)

libavcodec/ffv1dec.c:114:19: Call
    112.         int diff, context, sign;
    113. 
    114.         context = get_context(p, sample[1] + x, sample[0] + x, sample[1] + x);
                           ^
    115.         if (context < 0) {
    116.             context = -context;

libavcodec/ffv1.h:145:1: <Length trace>
143. }
144. 
145. static inline int get_context(PlaneContext *p, int16_t *src,
     ^
146.                               int16_t *last, int16_t *last2)
147. {

libavcodec/ffv1.h:145:1: Parameter `*src`
      143. }
      144. 
      145. static inline int get_context(PlaneContext *p, int16_t *src,
           ^
      146.                               int16_t *last, int16_t *last2)
      147. {

libavcodec/ffv1.h:155:24: Array access: Offset: [-2, +oo] (⇐ [0, +oo] + -2) Size: 2 by call to `decode_rgb_frame` 
      153.     if (p->quant_table[3][127]) {
      154.         const int TT = last2[0];
      155.         const int LL = src[-2];
                                  ^
      156.         return p->quant_table[0][(L - LT) & 0xFF] +
      157.                p->quant_table[1][(LT - T) & 0xFF] +
