libavcodec/h264_refs.c:137: error: Buffer Overrun L2
  Offset: [0, 64] Size: 2 by call to `build_def_list`.

libavcodec/h264_refs.c:116:1: Parameter `h->default_ref_list[*]`
114. }
115. 
116. int ff_h264_fill_default_ref_list(H264Context *h)
     ^
117. {
118.     int i, len;

libavcodec/h264_refs.c:137:20: Call
135.             len  = build_def_list(h->default_ref_list[list], FF_ARRAY_ELEMS(h->default_ref_list[0]),
136.                                   sorted, len, 0, h->picture_structure);
137.             len += build_def_list(h->default_ref_list[list] + len,
                        ^
138.                                   FF_ARRAY_ELEMS(h->default_ref_list[0]) - len,
139.                                   h->long_ref, 16, 1, h->picture_structure);

libavcodec/h264_refs.c:70:1: Parameter `def_len`
  68. }
  69. 
  70. static int build_def_list(H264Picture *def, int def_len,
      ^
  71.                           H264Picture **in, int len, int is_long, int sel)
  72. {

libavcodec/h264_refs.c:83:13: Call
  81.         if (i[0] < len && index < def_len) {
  82.             in[i[0]]->pic_id = is_long ? i[0] : in[i[0]]->frame_num;
  83.             split_field_copy(&def[index++], in[i[0]++], sel, 1);
                  ^
  84.         }
  85.         if (i[1] < len && index < def_len) {

libavcodec/h264_refs.c:54:1: <Length trace>
52. }
53. 
54. static int split_field_copy(H264Picture *dest, H264Picture *src, int parity, int id_add)
    ^
55. {
56.     int match = !!(src->reference & parity);

libavcodec/h264_refs.c:54:1: Parameter `*dest`
    52. }
    53. 
    54. static int split_field_copy(H264Picture *dest, H264Picture *src, int parity, int id_add)
        ^
    55. {
    56.     int match = !!(src->reference & parity);

libavcodec/h264_refs.c:59:9: Array access: Offset: [0, 64] Size: 2 by call to `build_def_list` 
    57. 
    58.     if (match) {
    59.         COPY_PICTURE(dest, src);
                ^
    60.         if (parity != PICT_FRAME) {
    61.             pic_as_field(dest, parity);
