libavcodec/h264_direct.c:140: error: Buffer Overrun L2
  Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap`.

libavcodec/h264_direct.c:102:1: Parameter `h->map_col_to_list0_field[*]`
100. }
101. 
102. void ff_h264_direct_ref_list_init(H264Context * const h){
     ^
103.     MpegEncContext * const s = &h->s;
104.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:140:13: Call
138.         if(FRAME_MBAFF)
139.         for(field=0; field<2; field++)
140.             fill_colmap(h, h->map_col_to_list0_field[field], list, field, field, 1);
                 ^
141.     }
142. }

libavcodec/h264_direct.c:69:1: <Offset trace>
67. }
68. 
69. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
    ^
70.     MpegEncContext * const s = &h->s;
71.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:69:1: Parameter `list`
  67. }
  68. 
  69. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
      ^
  70.     MpegEncContext * const s = &h->s;
  71.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:69:1: <Length trace>
67. }
68. 
69. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
    ^
70.     MpegEncContext * const s = &h->s;
71.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:69:1: Parameter `*map`
  67. }
  68. 
  69. static void fill_colmap(H264Context *h, int map[2][16+32], int list, int field, int colfield, int mbafi){
      ^
  70.     MpegEncContext * const s = &h->s;
  71.     Picture * const ref1 = &h->ref_list[1][0];

libavcodec/h264_direct.c:92:21: Array access: Offset: [0, 2] (⇐ [0, 1] + [0, 1]) Size: 2 by call to `fill_colmap` 
  90.                 if (4 * h->ref_list[0][j].frame_num + (h->ref_list[0][j].f.reference & 3) == poc) {
  91.                     int cur_ref= mbafi ? (j-16)^field : j;
  92.                     map[list][2*old_ref + (rfield^field) + 16] = cur_ref;
                          ^
  93.                     if(rfield == field || !interl)
  94.                         map[list][old_ref] = cur_ref;
