libavcodec/amrnbdec.c:344: error: Buffer Overrun L3
  Offset added: 20 Size: [0, +oo].

libavcodec/amrnbdec.c:319:1: <Length trace>
317.  * @param p                 pointer to the AMRContext
318.  */
319. static void lsf2lsp_3(AMRContext *p)
     ^
320. {
321.     const uint16_t *lsf_param = p->frame.lsf;

libavcodec/amrnbdec.c:319:1: Parameter `p->prev_lsf_r[*]`
317.  * @param p                 pointer to the AMRContext
318.  */
319. static void lsf2lsp_3(AMRContext *p)
     ^
320. {
321.     const uint16_t *lsf_param = p->frame.lsf;

libavcodec/amrnbdec.c:344:5: Array access: Offset added: 20 Size: [0, +oo]
342.     // store data for computing the next frame's LSFs
343.     interpolate_lsf(p->lsf_q, lsf_q);
344.     memcpy(p->prev_lsf_r, lsf_r, LP_FILTER_ORDER * sizeof(*lsf_r));
         ^
345. 
346.     ff_acelp_lsf2lspd(p->lsp[3], lsf_q, LP_FILTER_ORDER);

static void lsf2lsp_3(AMRContext *p)
{
    const uint16_t *lsf_param = p->frame.lsf;
    int16_t lsf_r[LP_FILTER_ORDER];
    float lsf_q[LP_FILTER_ORDER];
    const int16_t *lsf_quantizer;
    int i, j;
    lsf_quantizer = (p->cur_frame_mode == MODE_7k95 ? lsf_3_1_MODE_7k95 : lsf_3_1)[lsf_param[0]];
    memcpy(lsf_r, lsf_quantizer, 3 * sizeof(*lsf_r));
    lsf_quantizer = lsf_3_2[lsf_param[1] << (p->cur_frame_mode <= MODE_5k15)];
    memcpy(lsf_r + 3, lsf_quantizer, 3 * sizeof(*lsf_r));
    lsf_quantizer = (p->cur_frame_mode <= MODE_5k15 ? lsf_3_3_MODE_5k15 : lsf_3_3)[lsf_param[2]];
    memcpy(lsf_r + 6, lsf_quantizer, 4 * sizeof(*lsf_r));
    for (i = 0; i < LP_FILTER_ORDER; i++)
        lsf_q[i] = (lsf_r[i] + p->prev_lsf_r[i] * pred_fac[i]) * (LSF_R_FAC / 8000.0) + lsf_3_mean[i] * (1.0 / 8000.0);
    ff_set_min_dist_lsf(lsf_q, MIN_LSF_SPACING, LP_FILTER_ORDER);
    interpolate_lsf(p->lsf_q, lsf_q);
    memcpy(p->prev_lsf_r, lsf_r, LP_FILTER_ORDER * sizeof(*lsf_r));
    ff_acelp_lsf2lspd(p->lsp[3], lsf_q, LP_FILTER_ORDER);
    for (i = 1; i <= 3; i++)
        for(j = 0; j < LP_FILTER_ORDER; j++)
            p->lsp[i-1][j] = p->prev_lsp_sub4[j] +
                (p->lsp[3][j] - p->prev_lsp_sub4[j]) * 0.25 * i;
}
['static void lsf2lsp_3(AMRContext *p)\n{\n    const uint16_t *lsf_param = p->frame.lsf;\n    int16_t lsf_r[LP_FILTER_ORDER];\n    float lsf_q[LP_FILTER_ORDER];\n    const int16_t *lsf_quantizer;\n    int i, j;\n    lsf_quantizer = (p->cur_frame_mode == MODE_7k95 ? lsf_3_1_MODE_7k95 : lsf_3_1)[lsf_param[0]];\n    memcpy(lsf_r, lsf_quantizer, 3 * sizeof(*lsf_r));\n    lsf_quantizer = lsf_3_2[lsf_param[1] << (p->cur_frame_mode <= MODE_5k15)];\n    memcpy(lsf_r + 3, lsf_quantizer, 3 * sizeof(*lsf_r));\n    lsf_quantizer = (p->cur_frame_mode <= MODE_5k15 ? lsf_3_3_MODE_5k15 : lsf_3_3)[lsf_param[2]];\n    memcpy(lsf_r + 6, lsf_quantizer, 4 * sizeof(*lsf_r));\n    for (i = 0; i < LP_FILTER_ORDER; i++)\n        lsf_q[i] = (lsf_r[i] + p->prev_lsf_r[i] * pred_fac[i]) * (LSF_R_FAC / 8000.0) + lsf_3_mean[i] * (1.0 / 8000.0);\n    ff_set_min_dist_lsf(lsf_q, MIN_LSF_SPACING, LP_FILTER_ORDER);\n    interpolate_lsf(p->lsf_q, lsf_q);\n    memcpy(p->prev_lsf_r, lsf_r, LP_FILTER_ORDER * sizeof(*lsf_r));\n    ff_acelp_lsf2lspd(p->lsp[3], lsf_q, LP_FILTER_ORDER);\n    for (i = 1; i <= 3; i++)\n        for(j = 0; j < LP_FILTER_ORDER; j++)\n            p->lsp[i-1][j] = p->prev_lsp_sub4[j] +\n                (p->lsp[3][j] - p->prev_lsp_sub4[j]) * 0.25 * i;\n}']