libavcodec/h264_cabac.c:1272: error: Buffer Overrun L2
  Offset: [0, 25] Size: 23.

libavcodec/h264_cabac.c:1249:13: <Offset trace>
1247. 
1248.         if( !get_cabac_noinline( &h->cabac, &h->cabac_state[27+ctx] ) ){
1249.             mb_type= 0; /* B_Direct_16x16 */
                  ^
1250.         }else if( !get_cabac_noinline( &h->cabac, &h->cabac_state[27+3] ) ) {
1251.             mb_type= 1 + get_cabac_noinline( &h->cabac, &h->cabac_state[27+5] ); /* B_L[01]_16x16 */

libavcodec/h264_cabac.c:1249:13: Assignment
1247. 
1248.         if( !get_cabac_noinline( &h->cabac, &h->cabac_state[27+ctx] ) ){
1249.             mb_type= 0; /* B_Direct_16x16 */
                  ^
1250.         }else if( !get_cabac_noinline( &h->cabac, &h->cabac_state[27+3] ) ) {
1251.             mb_type= 1 + get_cabac_noinline( &h->cabac, &h->cabac_state[27+5] ); /* B_L[01]_16x16 */

libavcodec/h264data.h:199:1: <Length trace>
197. };
198. 
199. static const PMbInfo b_mb_type_info[23]={
     ^
200. {MB_TYPE_DIRECT2|MB_TYPE_L0L1                                      , 1, },
201. {MB_TYPE_16x16|MB_TYPE_P0L0                                       , 1, },

libavcodec/h264data.h:199:1: Array declaration
197. };
198. 
199. static const PMbInfo b_mb_type_info[23]={
     ^
200. {MB_TYPE_DIRECT2|MB_TYPE_L0L1                                      , 1, },
201. {MB_TYPE_16x16|MB_TYPE_P0L0                                       , 1, },

libavcodec/h264_cabac.c:1272:30: Array access: Offset: [0, 25] Size: 23
1270.             }
1271.         }
1272.             partition_count= b_mb_type_info[mb_type].partition_count;
                                   ^
1273.             mb_type=         b_mb_type_info[mb_type].type;
1274.     } else if( h->slice_type_nos == AV_PICTURE_TYPE_P ) {
