libavcodec/yop.c:239: error: Buffer Overrun L2
  Offset: [0, max(15, `*avpkt->data`)] Size: 15 by call to `yop_paint_block`.

libavcodec/yop.c:187:1: Parameter `*avpkt->data`
185. }
186. 
187. static int yop_decode_frame(AVCodecContext *avctx, void *data, int *got_frame,
     ^
188.                             AVPacket *avpkt)
189. {

libavcodec/yop.c:236:19: Call
234.             }
235. 
236.             tag = yop_get_next_nibble(s);
                       ^
237. 
238.             if (tag != 0xf) {

libavcodec/yop.c:173:1: Parameter `*s->low_nibble`
  171.  * only if necessary.
  172.  */
  173. static uint8_t yop_get_next_nibble(YopDecContext *s)
       ^
  174. {
  175.     int ret;

libavcodec/yop.c:178:9: Assignment
  176. 
  177.     if (s->low_nibble) {
  178.         ret           = *s->low_nibble & 0xf;
               ^
  179.         s->low_nibble = NULL;
  180.     }else {

libavcodec/yop.c:184:5: Assignment
  182.         ret           = *s->low_nibble >> 4;
  183.     }
  184.     return ret;
           ^
  185. }
  186. 

libavcodec/yop.c:236:13: Assignment
234.             }
235. 
236.             tag = yop_get_next_nibble(s);
                 ^
237. 
238.             if (tag != 0xf) {

libavcodec/yop.c:239:23: Call
237. 
238.             if (tag != 0xf) {
239.                 ret = yop_paint_block(s, tag);
                           ^
240.                 if (ret < 0)
241.                     return ret;

libavcodec/yop.c:127:1: <Offset trace>
125.  * @param tag the tag that was in the nibble
126.  */
127. static int yop_paint_block(YopDecContext *s, int tag)
     ^
128. {
129.     if (s->src_end - s->srcptr < paint_lut[tag][3]) {

libavcodec/yop.c:127:1: Parameter `tag`
  125.  * @param tag the tag that was in the nibble
  126.  */
  127. static int yop_paint_block(YopDecContext *s, int tag)
       ^
  128. {
  129.     if (s->src_end - s->srcptr < paint_lut[tag][3]) {

libavcodec/yop.c:56:1: <Length trace>
54.  * equal to max(bytes 0-2) + 1.
55.  */
56. static const uint8_t paint_lut[15][4] =
    ^
57.     {{1, 2, 3, 4}, {1, 2, 0, 3},
58.      {1, 2, 1, 3}, {1, 2, 2, 3},

libavcodec/yop.c:56:1: Array declaration
  54.  * equal to max(bytes 0-2) + 1.
  55.  */
  56. static const uint8_t paint_lut[15][4] =
      ^
  57.     {{1, 2, 3, 4}, {1, 2, 0, 3},
  58.      {1, 2, 1, 3}, {1, 2, 2, 3},

libavcodec/yop.c:129:34: Array access: Offset: [0, max(15, *avpkt->data)] Size: 15 by call to `yop_paint_block` 
  127. static int yop_paint_block(YopDecContext *s, int tag)
  128. {
  129.     if (s->src_end - s->srcptr < paint_lut[tag][3]) {
                                        ^
  130.         av_log(s->avctx, AV_LOG_ERROR, "Packet too small.\n");
  131.         return AVERROR_INVALIDDATA;
