libavcodec/cavsdec.c:557: error: Buffer Overrun L3
  Offset: [-3, +oo] Size: 9 by call to `decode_mb_i`.

libavcodec/cavsdec.c:557:13: Call
555.         do {
556.             check_for_slice(h);
557.             decode_mb_i(h, 0);
                 ^
558.         } while(ff_cavs_next_mb(h));
559.     } else if(h->pic_type == AV_PICTURE_TYPE_P) {

libavcodec/cavsdec.c:192:1: <Offset trace>
190.  ****************************************************************************/
191. 
192. static int decode_mb_i(AVSContext *h, int cbp_code) {
     ^
193.     GetBitContext *gb = &h->s.gb;
194.     unsigned pred_mode_uv;

libavcodec/cavsdec.c:192:1: Global `ff_cavs_scan3x3`
  190.  ****************************************************************************/
  191. 
  192. static int decode_mb_i(AVSContext *h, int cbp_code) {
       ^
  193.     GetBitContext *gb = &h->s.gb;
  194.     unsigned pred_mode_uv;

libavcodec/cavsdec.c:205:9: Assignment
  203.     for(block=0;block<4;block++) {
  204.         int nA,nB,predpred;
  205.         int pos = ff_cavs_scan3x3[block];
               ^
  206. 
  207.         nA = h->pred_mode_Y[pos-1];

libavcodec/cavsdec.c:192:1: <Length trace>
190.  ****************************************************************************/
191. 
192. static int decode_mb_i(AVSContext *h, int cbp_code) {
     ^
193.     GetBitContext *gb = &h->s.gb;
194.     unsigned pred_mode_uv;

libavcodec/cavsdec.c:192:1: Parameter `h->pred_mode_Y[*]`
  190.  ****************************************************************************/
  191. 
  192. static int decode_mb_i(AVSContext *h, int cbp_code) {
       ^
  193.     GetBitContext *gb = &h->s.gb;
  194.     unsigned pred_mode_uv;

libavcodec/cavsdec.c:208:14: Array access: Offset: [-3, +oo] Size: 9 by call to `decode_mb_i` 
  206. 
  207.         nA = h->pred_mode_Y[pos-1];
  208.         nB = h->pred_mode_Y[pos-3];
                    ^
  209.         predpred = FFMIN(nA,nB);
  210.         if(predpred == NOT_AVAIL) // if either is not available
