libavcodec/h264.h:1225: error: Buffer Overrun L2
  Offset: [2, `h->list_count` + 34] (⇐ [2, 35] + [0, `h->list_count` - 1]) Size: 16.

libavcodec/h264.h:1134:1: <Offset trace>
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: Parameter `h->list_count`
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: <Length trace>
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1134:1: Parameter `h->ref2frm[*]`
1132.  * @returns non zero if the loop filter can be skiped
1133.  */
1134. static int fill_filter_caches(H264Context *h, int mb_type){
      ^
1135.     MpegEncContext * const s = &h->s;
1136.     const int mb_xy= h->mb_xy;

libavcodec/h264.h:1223:17: Assignment
1221.             ref = &s->current_picture.ref_index[list][h->mb2b8_xy[mb_xy]];
1222.             {
1223.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ] + (MB_MBAFF ? 20 : 2);
                      ^
1224.                 *(uint32_t*)&h->ref_cache[list][scan8[ 0]] =
1225.                 *(uint32_t*)&h->ref_cache[list][scan8[ 2]] = (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101;

libavcodec/h264.h:1225:74: Array access: Offset: [2, h->list_count + 34] (⇐ [2, 35] + [0, h->list_count - 1]) Size: 16
1223.                 int (*ref2frm)[64] = h->ref2frm[ h->slice_num&(MAX_SLICES-1) ] + (MB_MBAFF ? 20 : 2);
1224.                 *(uint32_t*)&h->ref_cache[list][scan8[ 0]] =
1225.                 *(uint32_t*)&h->ref_cache[list][scan8[ 2]] = (pack16to32(ref2frm[list][ref[0]],ref2frm[list][ref[1]])&0x00FF00FF)*0x0101;
                                                                               ^
1226.                 ref += h->b8_stride;
1227.                 *(uint32_t*)&h->ref_cache[list][scan8[ 8]] =
