libavformat/dv.c:462: error: Buffer Overrun L2
  Offset: [0, 7] Size: 3 by call to `avpriv_dv_produce_packet`.

libavformat/dv.c:459:13: Call
457.             return AVERROR(EIO);
458.         size = c->dv_demux->sys->frame_size;
459.         if (avio_read(s->pb, c->buf, size) <= 0)
                 ^
460.             return AVERROR(EIO);
461. 

libavformat/aviobuf.c:620:1: Parameter `*buf`
  618. #endif
  619. 
  620. int avio_read(AVIOContext *s, unsigned char *buf, int size)
       ^
  621. {
  622.     int len, size1;

libavformat/dv.c:462:16: Call
460.             return AVERROR(EIO);
461. 
462.         size = avpriv_dv_produce_packet(c->dv_demux, pkt, c->buf, size);
                    ^
463.     }
464. 

libavformat/dv.c:319:1: Parameter `*buf`
  317. }
  318. 
  319. int avpriv_dv_produce_packet(DVDemuxContext *c, AVPacket *pkt,
       ^
  320.                       uint8_t* buf, int buf_size)
  321. {

libavformat/dv.c:326:20: Call
  324. 
  325.     if (buf_size < DV_PROFILE_BYTES ||
  326.         !(c->sys = avpriv_dv_frame_profile(c->sys, buf, buf_size)) ||
                          ^
  327.         buf_size < c->sys->frame_size) {
  328.           return -1;   /* Broken frame, or not enough data */

libavcodec/dvdata.c:248:1: Parameter `*frame`
    246. };
    247. 
    248. const DVprofile* avpriv_dv_frame_profile(const DVprofile *sys,
         ^
    249.                                   const uint8_t* frame, unsigned buf_size)
    250. {

libavformat/dv.c:339:5: Call
  337.        ppcm[i] = c->audio_buf[i];
  338.     }
  339.     dv_extract_audio(buf, ppcm, c->sys);
           ^
  340. 
  341.     /* We work with 720p frames split in half, thus even frames have

libavformat/dv.c:104:1: <Offset trace>
102.  *    are converted into 16bit linear ones.
103.  */
104. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
     ^
105.                             const DVprofile *sys)
106. {

libavformat/dv.c:104:1: Parameter `*frame`
    102.  *    are converted into 16bit linear ones.
    103.  */
    104. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
         ^
    105.                             const DVprofile *sys)
    106. {

libavformat/dv.c:112:15: Call
    110.     uint8_t *pcm, ipcm;
    111. 
    112.     as_pack = dv_extract_pack(frame, dv_audio_source);
                       ^
    113.     if (!as_pack)    /* No audio ? */
    114.         return 0;

libavformat/dv.c:75:1: Parameter `t`
      73.  * to have a fallback mechanism for complete search of missing packs.
      74.  */
      75. static const uint8_t* dv_extract_pack(uint8_t* frame, enum dv_pack_type t)
          ^
      76. {
      77.     int offs;

libavformat/dv.c:117:5: Assignment
    115. 
    116.     smpls =  as_pack[1] & 0x3f;       /* samples in this frame - min. samples */
    117.     freq  = (as_pack[4] >> 3) & 0x07; /* 0 - 48kHz, 1 - 44,1kHz, 2 - 32kHz */
             ^
    118.     quant =  as_pack[4] & 0x07;       /* 0 - 16bit linear, 1 - 12bit nonlinear */
    119. 

libavformat/dv.c:104:1: <Length trace>
102.  *    are converted into 16bit linear ones.
103.  */
104. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
     ^
105.                             const DVprofile *sys)
106. {

libavformat/dv.c:104:1: Parameter `sys->audio_min_samples[*]`
    102.  *    are converted into 16bit linear ones.
    103.  */
    104. static int dv_extract_audio(uint8_t* frame, uint8_t* ppcm[4],
         ^
    105.                             const DVprofile *sys)
    106. {

libavformat/dv.c:123:13: Array access: Offset: [0, 7] Size: 3 by call to `avpriv_dv_produce_packet` 
    121.         return -1; /* unsupported quantization */
    122. 
    123.     size = (sys->audio_min_samples[freq] + smpls) * 4; /* 2ch, 2bytes */
                     ^
    124.     half_ch = sys->difseg_size / 2;
    125. 
