libavcodec/ffv1dec.c:508: error: Buffer Overrun L2
  Offset: [22, 62] Size: 32 by call to `get_symbol`.

libavcodec/ffv1dec.c:448:1: Array declaration
446. }
447. 
448. static int read_extra_header(FFV1Context *f)
     ^
449. {
450.     RangeCoder *const c = &f->c;

libavcodec/ffv1dec.c:508:33: Call
506.                     int pred = j ? f->initial_states[i][j - 1][k] : 128;
507.                     f->initial_states[i][j][k] =
508.                         (pred + get_symbol(c, state2[k], 1)) & 0xFF;
                                     ^
509.                 }
510.         }

libavcodec/ffv1dec.c:62:1: Parameter `*state`
  60. }
  61. 
  62. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
      ^
  63. {
  64.     return get_symbol_inline(c, state, is_signed);

libavcodec/ffv1dec.c:64:12: Call
  62. static av_noinline int get_symbol(RangeCoder *c, uint8_t *state, int is_signed)
  63. {
  64.     return get_symbol_inline(c, state, is_signed);
                 ^
  65. }
  66. 

libavcodec/ffv1dec.c:42:1: Parameter `*state`
    40. #include "ffv1.h"
    41. 
    42. static inline av_flatten int get_symbol_inline(RangeCoder *c, uint8_t *state,
        ^
    43.                                                int is_signed)
    44. {

libavcodec/ffv1dec.c:55:22: Call
    53.         a = 1;
    54.         for (i = e - 1; i >= 0; i--)
    55.             a += a + get_rac(c, state + 22 + FFMIN(i, 9));  // 22..31
                             ^
    56. 
    57.         e = -(is_signed && get_rac(c, state + 11 + FFMIN(e, 10))); // 11..21

libavcodec/rangecoder.h:115:1: <Length trace>
113. }
114. 
115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
     ^
116. {
117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:115:1: Parameter `*state`
      113. }
      114. 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
           ^
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;

libavcodec/rangecoder.h:117:30: Array access: Offset: [22, 62] Size: 32 by call to `get_symbol` 
      115. static inline int get_rac(RangeCoder *c, uint8_t *const state)
      116. {
      117.     int range1 = (c->range * (*state)) >> 8;
                                        ^
      118.     int av_unused one_mask;
      119. 
