libavcodec/ffv1dec.c:402: error: Buffer Overrun L3
  Offset: [-1, +oo] (⇐ [0, +oo] + -1) Size: 2 by call to `decode_rgb_frame`.

libavcodec/ffv1dec.c:361:9: Call
359.         return ret;
360.     if (f->cur->key_frame)
361.         ffv1_clear_slice_state(f, fs);
             ^
362.     width  = fs->slice_width;
363.     height = fs->slice_height;

libavcodec/ffv1.c:269:17: Assignment
  267.             for (j = 0; j < p->context_count; j++) {
  268.                 p->vlc_state[j].drift     = 0;
  269.                 p->vlc_state[j].error_sum = 4;    //FFMAX((RANGE + 32)/64, 2);
                       ^
  270.                 p->vlc_state[j].bias      = 0;
  271.                 p->vlc_state[j].count     = 1;

libavcodec/ffv1dec.c:362:5: Assignment
360.     if (f->cur->key_frame)
361.         ffv1_clear_slice_state(f, fs);
362.     width  = fs->slice_width;
         ^
363.     height = fs->slice_height;
364.     x      = fs->slice_x;

libavcodec/ffv1dec.c:402:9: Call
400.                                p->data[1] + ps * x + y * p->linesize[1],
401.                                p->data[2] + ps * x + y * p->linesize[2] };
402.         decode_rgb_frame(fs, planes, width, height, p->linesize);
             ^
403.     }
404.     if (fs->ac != AC_GOLOMB_RICE && f->version > 2) {

libavcodec/ffv1dec.c:212:1: Array declaration
  210. }
  211. 
  212. static void decode_rgb_frame(FFV1Context *s, uint8_t *src[3], int w, int h,
       ^
  213.                              int stride[3])
  214. {

libavcodec/ffv1dec.c:242:17: Call
  240.             sample[p][0][w]  = sample[p][0][w - 1];
  241.             if (lbd)
  242.                 decode_line(s, w, sample[p], (p + 1) / 2, 9);
                       ^
  243.             else
  244.                 decode_line(s, w, sample[p], (p + 1) / 2, bits + 1);

libavcodec/ffv1dec.c:100:1: Parameter `w`
     98. }
     99. 
    100. static av_always_inline void decode_line(FFV1Context *s, int w,
         ^
    101.                                          int16_t *sample[2],
    102.                                          int plane_index, int bits)

libavcodec/ffv1dec.c:165:25: Call
    163.             diff = -diff;
    164. 
    165.         sample[1][x] = (predict(sample[1] + x, sample[0] + x) + diff) &
                                 ^
    166.                        ((1 << bits) - 1);
    167.     }

libavcodec/ffv1.h:136:1: <Length trace>
134. }
135. 
136. static inline int predict(int16_t *src, int16_t *last)
     ^
137. {
138.     const int LT = last[-1];

libavcodec/ffv1.h:136:1: Parameter `*last`
      134. }
      135. 
      136. static inline int predict(int16_t *src, int16_t *last)
           ^
      137. {
      138.     const int LT = last[-1];

libavcodec/ffv1.h:138:20: Array access: Offset: [-1, +oo] (⇐ [0, +oo] + -1) Size: 2 by call to `decode_rgb_frame` 
      136. static inline int predict(int16_t *src, int16_t *last)
      137. {
      138.     const int LT = last[-1];
                              ^
      139.     const int T  = last[0];
      140.     const int L  = src[-1];
