libavcodec/h264.h:1344: error: Buffer Overrun L1
  Offset: [2, `h->list_count` + 19] (⇐ [2, 20] + [0, `h->list_count` - 1]) Size: 2.

libavcodec/h264.h:1170:1: <Offset trace>
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: Parameter `h->list_count`
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: <Length trace>
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1170:1: Parameter `h->ref2frm[*][*]`
1168.  * @return non zero if the loop filter can be skiped
1169.  */
1170. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1171.     MpegEncContext * const s = &h->s;
1172.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1341:17: Assignment
1339.                 const int b_xy= h->mb2b_xy[top_xy] + 3*h->b_stride;
1340.                 const int b8_xy= 4*top_xy + 2;
1341.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_table[top_xy]&(MAX_SLICES-1) ][0] + (MB_MBAFF ? 20 : 2);
                      ^
1342.                 AV_COPY128(h->mv_cache[list][scan8[0] + 0 - 1*8], s->current_picture.motion_val[list][b_xy + 0]);
1343.                 h->ref_cache[list][scan8[0] + 0 - 1*8]=

libavcodec/h264.h:1344:57: Array access: Offset: [2, h->list_count + 19] (⇐ [2, 20] + [0, h->list_count - 1]) Size: 2
1342.                 AV_COPY128(h->mv_cache[list][scan8[0] + 0 - 1*8], s->current_picture.motion_val[list][b_xy + 0]);
1343.                 h->ref_cache[list][scan8[0] + 0 - 1*8]=
1344.                 h->ref_cache[list][scan8[0] + 1 - 1*8]= ref2frm[list][s->current_picture.ref_index[list][b8_xy + 0]];
                                                              ^
1345.                 h->ref_cache[list][scan8[0] + 2 - 1*8]=
1346.                 h->ref_cache[list][scan8[0] + 3 - 1*8]= ref2frm[list][s->current_picture.ref_index[list][b8_xy + 1]];
