libavformat/avidec.c:606: error: Buffer Overrun L2
  Offset: [-528, 2277] Size: 20 by call to `avi_load_index`.

libavformat/avidec.c:227:1: Parameter `s->nb_streams`
225. }
226. 
227. static int avi_read_header(AVFormatContext *s, AVFormatParameters *ap)
     ^
228. {
229.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:606:9: Call
604. 
605.     if(!avi->index_loaded && !url_is_streamed(pb))
606.         avi_load_index(s);
             ^
607.     avi->index_loaded = 1;
608.     avi->non_interleaved |= guess_ni_flag(s);

libavformat/avidec.c:935:1: Parameter `s->nb_streams`
  933. }
  934. 
  935. static int avi_load_index(AVFormatContext *s)
       ^
  936. {
  937.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:961:17: Call
  959.         switch(tag) {
  960.         case MKTAG('i', 'd', 'x', '1'):
  961.             if (avi_read_idx1(s, size) < 0)
                       ^
  962.                 goto skip;
  963.             else

libavformat/avidec.c:864:1: <Offset trace>
862. /* XXX: We make the implicit supposition that the positions are sorted
863.    for each stream. */
864. static int avi_read_idx1(AVFormatContext *s, int size)
     ^
865. {
866.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:864:1: Parameter `s->nb_streams`
    862. /* XXX: We make the implicit supposition that the positions are sorted
    863.    for each stream. */
    864. static int avi_read_idx1(AVFormatContext *s, int size)
         ^
    865. {
    866.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:864:1: <Length trace>
862. /* XXX: We make the implicit supposition that the positions are sorted
863.    for each stream. */
864. static int avi_read_idx1(AVFormatContext *s, int size)
     ^
865. {
866.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:864:1: Parameter `s->streams[*]`
    862. /* XXX: We make the implicit supposition that the positions are sorted
    863.    for each stream. */
    864. static int avi_read_idx1(AVFormatContext *s, int size)
         ^
    865. {
    866.     AVIContext *avi = s->priv_data;

libavformat/avidec.c:896:14: Array access: Offset: [-528, 2277] Size: 20 by call to `avi_load_index` 
    894.         if (index >= s->nb_streams)
    895.             continue;
    896.         st = s->streams[index];
                      ^
    897.         ast = st->priv_data;
    898. 
