libavcodec/ffv1dec.c:522: error: Buffer Overrun L2
  Offset: [22, 62] Size: 32 by call to `get_symbol`.

libavcodec/ffv1dec.c:462:1: Array declaration
460. }
461. 
462. static int read_extra_header(FFV1Context *f)
     ^
463. {
464.     RangeCoder *const c = &f->c;

libavcodec/ffv1dec.c:522:33: Call
520.                     int pred = j ? f->initial_states[i][j - 1][k] : 128;
521.                     f->initial_states[i][j][k] =
522.                         (pred + get_symbol(c, state2[k], 1)) & 0xFF;
                                     ^
523.                 }
524.         }

libavcodec/ffv1dec.c:63:1: Parameter `*state`
  61. }
  62. 
  63. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
      ^
  64. {
  65.     return get_symbol_inline(c, state, is_signed);

libavcodec/ffv1dec.c:65:12: Call
  63. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
  64. {
  65.     return get_symbol_inline(c, state, is_signed);
                 ^
  66. }
  67. 

libavcodec/ffv1dec.c:43:1: Parameter `*state`
    41. #include "ffv1.h"
    42. 
    43. static inline av_flatten int get_symbol_inline(RangeCoder *c, uint8_t *state,
        ^
    44.                                                int is_signed)
    45. {

libavcodec/ffv1dec.c:56:22: Call
    54.         a = 1;
    55.         for (i = e - 1; i >= 0; i--)
    56.             a += a + get_rac(c, state + 22 + FFMIN(i, 9));  // 22..31
                             ^
    57. 
    58.         e = -(is_signed && get_rac(c, state + 11 + FFMIN(e, 10))); // 11..21

libavcodec/rangecoder.h:115:1: <Length trace>
113. }
114. 
115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
     ^
116. {
117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:115:1: Parameter `*state`
      113. }
      114. 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
           ^
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:117:30: Array access: Offset: [22, 62] Size: 32 by call to `get_symbol` 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;
                                        ^
      118. 
      119.     c->range -= range1;
