libavcodec/h264.c:6009: error: Buffer Overrun L2
  Offset: [16, 31] Size: 24 by call to `decode_cabac_residual`.

libavcodec/h264.c:6007:22: Assignment
6005.             if( cbp&15 ) {
6006.                 qmul = h->dequant4_coeff[0][s->qscale];
6007.                 for( i = 0; i < 16; i++ ) {
                           ^
6008.                     //av_log( s->avctx, AV_LOG_ERROR, "INTRA16x16 AC:%d\n", i );
6009.                     decode_cabac_residual(h, h->mb + 16*i, 1, i, scan + 1, qmul, 15);

libavcodec/h264.c:6009:21: Call
6007.                 for( i = 0; i < 16; i++ ) {
6008.                     //av_log( s->avctx, AV_LOG_ERROR, "INTRA16x16 AC:%d\n", i );
6009.                     decode_cabac_residual(h, h->mb + 16*i, 1, i, scan + 1, qmul, 15);
                          ^
6010.                 }
6011.             } else {

libavcodec/h264.c:5372:1: Parameter `n`
  5370. };
  5371. 
  5372. static void decode_cabac_residual( H264Context *h, DCTELEM *block, int cat, int n, const uint8_t *scantable, const uint32_t *qmul, int max_coeff) {
        ^
  5373.     static const int significant_coeff_flag_offset[2][6] = {
  5374.       { 105+0, 105+15, 105+29, 105+44, 105+47, 402 },

libavcodec/h264.c:5441:49: Call
  5439.     /* read coded block flag */
  5440.     if( cat != 5 ) {
  5441.         if( get_cabac( CC, &h->cabac_state[85 + get_cabac_cbf_ctx( h, cat, n ) ] ) == 0 ) {
                                                        ^
  5442.             if( cat == 1 || cat == 2 )
  5443.                 h->non_zero_count_cache[scan8[n]] = 0;

libavcodec/h264.c:5337:1: <Offset trace>
5335. }
5336. 
5337. static inline int get_cabac_cbf_ctx( H264Context *h, int cat, int idx ) {
      ^
5338.     int nza, nzb;
5339.     int ctx = 0;

libavcodec/h264.c:5337:1: Parameter `idx`
    5335. }
    5336. 
    5337. static inline int get_cabac_cbf_ctx( H264Context *h, int cat, int idx ) {
          ^
    5338.     int nza, nzb;
    5339.     int ctx = 0;

libavcodec/h264data.h:271:1: <Length trace>
269. */
270. 
271. static const uint8_t scan8[16 + 2*4]={
     ^
272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264data.h:271:1: Array declaration
    269. */
    270. 
    271. static const uint8_t scan8[16 + 2*4]={
         ^
    272.  4+1*8, 5+1*8, 4+2*8, 5+2*8,
    273.  6+1*8, 7+1*8, 6+2*8, 7+2*8,

libavcodec/h264.c:5352:39: Array access: Offset: [16, 31] Size: 24 by call to `decode_cabac_residual` 
    5350.     } else {
    5351.         assert(cat == 4);
    5352.         nza = h->non_zero_count_cache[scan8[16+idx] - 1];
                                                ^
    5353.         nzb = h->non_zero_count_cache[scan8[16+idx] - 8];
    5354.     }
