libavcodec/aac.c:248: error: Buffer Overrun L3
  Offset added: 512 Size: [0, +oo].

libavcodec/aac.c:208:1: <Length trace>
206.  * @return  Returns error status. 0 - OK, !0 - error
207.  */
208. static av_cold int output_configure(AACContext *ac,
     ^
209.                             enum ChannelPosition che_pos[4][MAX_ELEM_ID],
210.                             enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aac.c:208:1: Parameter `ac->che[*]`
206.  * @return  Returns error status. 0 - OK, !0 - error
207.  */
208. static av_cold int output_configure(AACContext *ac,
     ^
209.                             enum ChannelPosition che_pos[4][MAX_ELEM_ID],
210.                             enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aac.c:248:9: Array access: Offset added: 512 Size: [0, +oo]
246.         }
247. 
248.         memcpy(ac->tag_che_map, ac->che, 4 * MAX_ELEM_ID * sizeof(ac->che[0][0]));
             ^
249.         ac->tags_mapped = 4 * MAX_ELEM_ID;
250. 

static av_cold int output_configure(AACContext *ac,
                            enum ChannelPosition che_pos[4][MAX_ELEM_ID],
                            enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],
                            int channel_config, enum OCStatus oc_type)
{
    AVCodecContext *avctx = ac->avccontext;
    int i, type, channels = 0, ret;
    memcpy(che_pos, new_che_pos, 4 * MAX_ELEM_ID * sizeof(new_che_pos[0][0]));
    if (channel_config) {
        for (i = 0; i < tags_per_config[channel_config]; i++) {
            if ((ret = che_configure(ac, che_pos,
                                     aac_channel_layout_map[channel_config - 1][i][0],
                                     aac_channel_layout_map[channel_config - 1][i][1],
                                     &channels)))
                return ret;
        }
        memset(ac->tag_che_map, 0,       4 * MAX_ELEM_ID * sizeof(ac->che[0][0]));
        ac->tags_mapped = 0;
        avctx->channel_layout = aac_channel_layout[channel_config - 1];
    } else {
        for (i = 0; i < MAX_ELEM_ID; i++) {
            for (type = 0; type < 4; type++) {
                if ((ret = che_configure(ac, che_pos, type, i, &channels)))
                    return ret;
            }
        }
        memcpy(ac->tag_che_map, ac->che, 4 * MAX_ELEM_ID * sizeof(ac->che[0][0]));
        ac->tags_mapped = 4 * MAX_ELEM_ID;
        avctx->channel_layout = 0;
    }
    avctx->channels = channels;
    ac->output_configured = oc_type;
    return 0;
}
['static av_cold int output_configure(AACContext *ac,\n                            enum ChannelPosition che_pos[4][MAX_ELEM_ID],\n                            enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],\n                            int channel_config, enum OCStatus oc_type)\n{\n    AVCodecContext *avctx = ac->avccontext;\n    int i, type, channels = 0, ret;\n    memcpy(che_pos, new_che_pos, 4 * MAX_ELEM_ID * sizeof(new_che_pos[0][0]));\n    if (channel_config) {\n        for (i = 0; i < tags_per_config[channel_config]; i++) {\n            if ((ret = che_configure(ac, che_pos,\n                                     aac_channel_layout_map[channel_config - 1][i][0],\n                                     aac_channel_layout_map[channel_config - 1][i][1],\n                                     &channels)))\n                return ret;\n        }\n        memset(ac->tag_che_map, 0,       4 * MAX_ELEM_ID * sizeof(ac->che[0][0]));\n        ac->tags_mapped = 0;\n        avctx->channel_layout = aac_channel_layout[channel_config - 1];\n    } else {\n        for (i = 0; i < MAX_ELEM_ID; i++) {\n            for (type = 0; type < 4; type++) {\n                if ((ret = che_configure(ac, che_pos, type, i, &channels)))\n                    return ret;\n            }\n        }\n        memcpy(ac->tag_che_map, ac->che, 4 * MAX_ELEM_ID * sizeof(ac->che[0][0]));\n        ac->tags_mapped = 4 * MAX_ELEM_ID;\n        avctx->channel_layout = 0;\n    }\n    avctx->channels = channels;\n    ac->output_configured = oc_type;\n    return 0;\n}']