libavcodec/wma.c:221: error: Buffer Overrun L3
  Offset: [-6, 2] Size: 3.

libavcodec/wma.c:114:9: <Offset trace>
112.         s->nb_block_sizes = nb + 1;
113.     } else
114.         s->nb_block_sizes = 1;
             ^
115. 
116.     /* init rate dependent parameters */

libavcodec/wma.c:114:9: Assignment
112.         s->nb_block_sizes = nb + 1;
113.     } else
114.         s->nb_block_sizes = 1;
             ^
115. 
116.     /* init rate dependent parameters */

libavcodec/wma.c:218:17: Assignment
216.                 /* hardcoded tables */
217.                 table = NULL;
218.                 a     = s->frame_len_bits - BLOCK_MIN_BITS - k;
                     ^
219.                 if (a < 3) {
220.                     if (avctx->sample_rate >= 44100)

libavcodec/wmadata.h:48:1: <Length trace>
46. };
47. 
48. static const uint8_t exponent_band_44100[3][25] = {
    ^
49.     { 12, 4, 4, 4, 4,  4,  8, 8, 8, 12, 16, 20, 36, },
50.     { 15, 4, 8, 4, 8,  8,  4, 8, 8, 12, 12, 12, 24, 28, 40, 76, },

libavcodec/wmadata.h:48:1: Array declaration
46. };
47. 
48. static const uint8_t exponent_band_44100[3][25] = {
    ^
49.     { 12, 4, 4, 4, 4,  4,  8, 8, 8, 12, 16, 20, 36, },
50.     { 15, 4, 8, 4, 8,  8,  4, 8, 8, 12, 12, 12, 24, 28, 40, 76, },

libavcodec/wma.c:221:25: Array access: Offset: [-6, 2] Size: 3
219.                 if (a < 3) {
220.                     if (avctx->sample_rate >= 44100)
221.                         table = exponent_band_44100[a];
                             ^
222.                     else if (avctx->sample_rate >= 32000)
223.                         table = exponent_band_32000[a];

int ff_wma_init(AVCodecContext *avctx, int flags2)
{
    WMACodecContext *s = avctx->priv_data;
    int i;
    float bps1, high_freq;
    volatile float bps;
    int sample_rate1;
    int coef_vlc_table;
    if (avctx->sample_rate <= 0 || avctx->sample_rate > 50000 ||
        avctx->channels    <= 0 || avctx->channels    > 2     ||
        avctx->bit_rate    <= 0)
        return -1;
    ff_fmt_convert_init(&s->fmt_conv, avctx);
    avpriv_float_dsp_init(&s->fdsp, avctx->flags & CODEC_FLAG_BITEXACT);
    if (avctx->codec->id == AV_CODEC_ID_WMAV1)
        s->version = 1;
    else
        s->version = 2;
    s->frame_len_bits = ff_wma_get_frame_len_bits(avctx->sample_rate,
                                                  s->version, 0);
    s->next_block_len_bits = s->frame_len_bits;
    s->prev_block_len_bits = s->frame_len_bits;
    s->block_len_bits      = s->frame_len_bits;
    s->frame_len = 1 << s->frame_len_bits;
    if (s->use_variable_block_len) {
        int nb_max, nb;
        nb = ((flags2 >> 3) & 3) + 1;
        if ((avctx->bit_rate / avctx->channels) >= 32000)
            nb += 2;
        nb_max = s->frame_len_bits - BLOCK_MIN_BITS;
        if (nb > nb_max)
            nb = nb_max;
        s->nb_block_sizes = nb + 1;
    } else
        s->nb_block_sizes = 1;
    s->use_noise_coding = 1;
    high_freq           = avctx->sample_rate * 0.5;
    sample_rate1 = avctx->sample_rate;
    if (s->version == 2) {
        if (sample_rate1 >= 44100)
            sample_rate1 = 44100;
        else if (sample_rate1 >= 22050)
            sample_rate1 = 22050;
        else if (sample_rate1 >= 16000)
            sample_rate1 = 16000;
        else if (sample_rate1 >= 11025)
            sample_rate1 = 11025;
        else if (sample_rate1 >= 8000)
            sample_rate1 = 8000;
    }
    bps                 = (float) avctx->bit_rate /
                          (float) (avctx->channels * avctx->sample_rate);
    s->byte_offset_bits = av_log2((int) (bps * s->frame_len / 8.0 + 0.5)) + 2;
    bps1 = bps;
    if (avctx->channels == 2)
        bps1 = bps * 1.6;
    if (sample_rate1 == 44100) {
        if (bps1 >= 0.61)
            s->use_noise_coding = 0;
        else
            high_freq = high_freq * 0.4;
    } else if (sample_rate1 == 22050) {
        if (bps1 >= 1.16)
            s->use_noise_coding = 0;
        else if (bps1 >= 0.72)
            high_freq = high_freq * 0.7;
        else
            high_freq = high_freq * 0.6;
    } else if (sample_rate1 == 16000) {
        if (bps > 0.5)
            high_freq = high_freq * 0.5;
        else
            high_freq = high_freq * 0.3;
    } else if (sample_rate1 == 11025)
        high_freq = high_freq * 0.7;
    else if (sample_rate1 == 8000) {
        if (bps <= 0.625)
            high_freq = high_freq * 0.5;
        else if (bps > 0.75)
            s->use_noise_coding = 0;
        else
            high_freq = high_freq * 0.65;
    } else {
        if (bps >= 0.8)
            high_freq = high_freq * 0.75;
        else if (bps >= 0.6)
            high_freq = high_freq * 0.6;
        else
            high_freq = high_freq * 0.5;
    }
    av_dlog(s->avctx, "flags2=0x%x\n", flags2);
    av_dlog(s->avctx, "version=%d channels=%d sample_rate=%d bitrate=%d block_align=%d\n",
            s->version, avctx->channels, avctx->sample_rate, avctx->bit_rate,
            avctx->block_align);
    av_dlog(s->avctx, "bps=%f bps1=%f high_freq=%f bitoffset=%d\n",
            bps, bps1, high_freq, s->byte_offset_bits);
    av_dlog(s->avctx, "use_noise_coding=%d use_exp_vlc=%d nb_block_sizes=%d\n",
            s->use_noise_coding, s->use_exp_vlc, s->nb_block_sizes);
    {
        int a, b, pos, lpos, k, block_len, i, j, n;
        const uint8_t *table;
        if (s->version == 1)
            s->coefs_start = 3;
        else
            s->coefs_start = 0;
        for (k = 0; k < s->nb_block_sizes; k++) {
            block_len = s->frame_len >> k;
            if (s->version == 1) {
                lpos = 0;
                for (i = 0; i < 25; i++) {
                    a   = ff_wma_critical_freqs[i];
                    b   = avctx->sample_rate;
                    pos = ((block_len * 2 * a) + (b >> 1)) / b;
                    if (pos > block_len)
                        pos = block_len;
                    s->exponent_bands[0][i] = pos - lpos;
                    if (pos >= block_len) {
                        i++;
                        break;
                    }
                    lpos = pos;
                }
                s->exponent_sizes[0] = i;
            } else {
                table = NULL;
                a     = s->frame_len_bits - BLOCK_MIN_BITS - k;
                if (a < 3) {
                    if (avctx->sample_rate >= 44100)
                        table = exponent_band_44100[a];
                    else if (avctx->sample_rate >= 32000)
                        table = exponent_band_32000[a];
                    else if (avctx->sample_rate >= 22050)
                        table = exponent_band_22050[a];
                }
                if (table) {
                    n = *table++;
                    for (i = 0; i < n; i++)
                        s->exponent_bands[k][i] = table[i];
                    s->exponent_sizes[k] = n;
                } else {
                    j    = 0;
                    lpos = 0;
                    for (i = 0; i < 25; i++) {
                        a     = ff_wma_critical_freqs[i];
                        b     = avctx->sample_rate;
                        pos   = ((block_len * 2 * a) + (b << 1)) / (4 * b);
                        pos <<= 2;
                        if (pos > block_len)
                            pos = block_len;
                        if (pos > lpos)
                            s->exponent_bands[k][j++] = pos - lpos;
                        if (pos >= block_len)
                            break;
                        lpos = pos;
                    }
                    s->exponent_sizes[k] = j;
                }
            }
            s->coefs_end[k] = (s->frame_len - ((s->frame_len * 9) / 100)) >> k;
            s->high_band_start[k] = (int) ((block_len * 2 * high_freq) /
                                           avctx->sample_rate + 0.5);
            n   = s->exponent_sizes[k];
            j   = 0;
            pos = 0;
            for (i = 0; i < n; i++) {
                int start, end;
                start = pos;
                pos  += s->exponent_bands[k][i];
                end   = pos;
                if (start < s->high_band_start[k])
                    start = s->high_band_start[k];
                if (end > s->coefs_end[k])
                    end = s->coefs_end[k];
                if (end > start)
                    s->exponent_high_bands[k][j++] = end - start;
            }
            s->exponent_high_sizes[k] = j;
#if 0
            tprintf(s->avctx, "%5d: coefs_end=%d high_band_start=%d nb_high_bands=%d: ",
                    s->frame_len >> k,
                    s->coefs_end[k],
                    s->high_band_start[k],
                    s->exponent_high_sizes[k]);
            for (j = 0; j < s->exponent_high_sizes[k]; j++)
                tprintf(s->avctx, " %d", s->exponent_high_bands[k][j]);
            tprintf(s->avctx, "\n");
#endif
        }
    }
#ifdef TRACE
    {
        int i, j;
        for (i = 0; i < s->nb_block_sizes; i++) {
            tprintf(s->avctx, "%5d: n=%2d:",
                    s->frame_len >> i,
                    s->exponent_sizes[i]);
            for (j = 0; j < s->exponent_sizes[i]; j++)
                tprintf(s->avctx, " %d", s->exponent_bands[i][j]);
            tprintf(s->avctx, "\n");
        }
    }
#endif
    for (i = 0; i < s->nb_block_sizes; i++) {
        ff_init_ff_sine_windows(s->frame_len_bits - i);
        s->windows[i] = ff_sine_windows[s->frame_len_bits - i];
    }
    s->reset_block_lengths = 1;
    if (s->use_noise_coding) {
        if (s->use_exp_vlc)
            s->noise_mult = 0.02;
        else
            s->noise_mult = 0.04;
#ifdef TRACE
        for (i = 0; i < NOISE_TAB_SIZE; i++)
            s->noise_table[i] = 1.0 * s->noise_mult;
#else
        {
            unsigned int seed;
            float norm;
            seed = 1;
            norm = (1.0 / (float) (1LL << 31)) * sqrt(3) * s->noise_mult;
            for (i = 0; i < NOISE_TAB_SIZE; i++) {
                seed              = seed * 314159 + 1;
                s->noise_table[i] = (float) ((int) seed) * norm;
            }
        }
#endif
    }
    coef_vlc_table = 2;
    if (avctx->sample_rate >= 32000) {
        if (bps1 < 0.72)
            coef_vlc_table = 0;
        else if (bps1 < 1.16)
            coef_vlc_table = 1;
    }
    s->coef_vlcs[0] = &coef_vlcs[coef_vlc_table * 2];
    s->coef_vlcs[1] = &coef_vlcs[coef_vlc_table * 2 + 1];
    init_coef_vlc(&s->coef_vlc[0], &s->run_table[0], &s->level_table[0],
                  &s->int_table[0], s->coef_vlcs[0]);
    init_coef_vlc(&s->coef_vlc[1], &s->run_table[1], &s->level_table[1],
                  &s->int_table[1], s->coef_vlcs[1]);
    return 0;
}
['int ff_wma_init(AVCodecContext *avctx, int flags2)\n{\n    WMACodecContext *s = avctx->priv_data;\n    int i;\n    float bps1, high_freq;\n    volatile float bps;\n    int sample_rate1;\n    int coef_vlc_table;\n    if (avctx->sample_rate <= 0 || avctx->sample_rate > 50000 ||\n        avctx->channels    <= 0 || avctx->channels    > 2     ||\n        avctx->bit_rate    <= 0)\n        return -1;\n    ff_fmt_convert_init(&s->fmt_conv, avctx);\n    avpriv_float_dsp_init(&s->fdsp, avctx->flags & CODEC_FLAG_BITEXACT);\n    if (avctx->codec->id == AV_CODEC_ID_WMAV1)\n        s->version = 1;\n    else\n        s->version = 2;\n    s->frame_len_bits = ff_wma_get_frame_len_bits(avctx->sample_rate,\n                                                  s->version, 0);\n    s->next_block_len_bits = s->frame_len_bits;\n    s->prev_block_len_bits = s->frame_len_bits;\n    s->block_len_bits      = s->frame_len_bits;\n    s->frame_len = 1 << s->frame_len_bits;\n    if (s->use_variable_block_len) {\n        int nb_max, nb;\n        nb = ((flags2 >> 3) & 3) + 1;\n        if ((avctx->bit_rate / avctx->channels) >= 32000)\n            nb += 2;\n        nb_max = s->frame_len_bits - BLOCK_MIN_BITS;\n        if (nb > nb_max)\n            nb = nb_max;\n        s->nb_block_sizes = nb + 1;\n    } else\n        s->nb_block_sizes = 1;\n    s->use_noise_coding = 1;\n    high_freq           = avctx->sample_rate * 0.5;\n    sample_rate1 = avctx->sample_rate;\n    if (s->version == 2) {\n        if (sample_rate1 >= 44100)\n            sample_rate1 = 44100;\n        else if (sample_rate1 >= 22050)\n            sample_rate1 = 22050;\n        else if (sample_rate1 >= 16000)\n            sample_rate1 = 16000;\n        else if (sample_rate1 >= 11025)\n            sample_rate1 = 11025;\n        else if (sample_rate1 >= 8000)\n            sample_rate1 = 8000;\n    }\n    bps                 = (float) avctx->bit_rate /\n                          (float) (avctx->channels * avctx->sample_rate);\n    s->byte_offset_bits = av_log2((int) (bps * s->frame_len / 8.0 + 0.5)) + 2;\n    bps1 = bps;\n    if (avctx->channels == 2)\n        bps1 = bps * 1.6;\n    if (sample_rate1 == 44100) {\n        if (bps1 >= 0.61)\n            s->use_noise_coding = 0;\n        else\n            high_freq = high_freq * 0.4;\n    } else if (sample_rate1 == 22050) {\n        if (bps1 >= 1.16)\n            s->use_noise_coding = 0;\n        else if (bps1 >= 0.72)\n            high_freq = high_freq * 0.7;\n        else\n            high_freq = high_freq * 0.6;\n    } else if (sample_rate1 == 16000) {\n        if (bps > 0.5)\n            high_freq = high_freq * 0.5;\n        else\n            high_freq = high_freq * 0.3;\n    } else if (sample_rate1 == 11025)\n        high_freq = high_freq * 0.7;\n    else if (sample_rate1 == 8000) {\n        if (bps <= 0.625)\n            high_freq = high_freq * 0.5;\n        else if (bps > 0.75)\n            s->use_noise_coding = 0;\n        else\n            high_freq = high_freq * 0.65;\n    } else {\n        if (bps >= 0.8)\n            high_freq = high_freq * 0.75;\n        else if (bps >= 0.6)\n            high_freq = high_freq * 0.6;\n        else\n            high_freq = high_freq * 0.5;\n    }\n    av_dlog(s->avctx, "flags2=0x%x\\n", flags2);\n    av_dlog(s->avctx, "version=%d channels=%d sample_rate=%d bitrate=%d block_align=%d\\n",\n            s->version, avctx->channels, avctx->sample_rate, avctx->bit_rate,\n            avctx->block_align);\n    av_dlog(s->avctx, "bps=%f bps1=%f high_freq=%f bitoffset=%d\\n",\n            bps, bps1, high_freq, s->byte_offset_bits);\n    av_dlog(s->avctx, "use_noise_coding=%d use_exp_vlc=%d nb_block_sizes=%d\\n",\n            s->use_noise_coding, s->use_exp_vlc, s->nb_block_sizes);\n    {\n        int a, b, pos, lpos, k, block_len, i, j, n;\n        const uint8_t *table;\n        if (s->version == 1)\n            s->coefs_start = 3;\n        else\n            s->coefs_start = 0;\n        for (k = 0; k < s->nb_block_sizes; k++) {\n            block_len = s->frame_len >> k;\n            if (s->version == 1) {\n                lpos = 0;\n                for (i = 0; i < 25; i++) {\n                    a   = ff_wma_critical_freqs[i];\n                    b   = avctx->sample_rate;\n                    pos = ((block_len * 2 * a) + (b >> 1)) / b;\n                    if (pos > block_len)\n                        pos = block_len;\n                    s->exponent_bands[0][i] = pos - lpos;\n                    if (pos >= block_len) {\n                        i++;\n                        break;\n                    }\n                    lpos = pos;\n                }\n                s->exponent_sizes[0] = i;\n            } else {\n                table = NULL;\n                a     = s->frame_len_bits - BLOCK_MIN_BITS - k;\n                if (a < 3) {\n                    if (avctx->sample_rate >= 44100)\n                        table = exponent_band_44100[a];\n                    else if (avctx->sample_rate >= 32000)\n                        table = exponent_band_32000[a];\n                    else if (avctx->sample_rate >= 22050)\n                        table = exponent_band_22050[a];\n                }\n                if (table) {\n                    n = *table++;\n                    for (i = 0; i < n; i++)\n                        s->exponent_bands[k][i] = table[i];\n                    s->exponent_sizes[k] = n;\n                } else {\n                    j    = 0;\n                    lpos = 0;\n                    for (i = 0; i < 25; i++) {\n                        a     = ff_wma_critical_freqs[i];\n                        b     = avctx->sample_rate;\n                        pos   = ((block_len * 2 * a) + (b << 1)) / (4 * b);\n                        pos <<= 2;\n                        if (pos > block_len)\n                            pos = block_len;\n                        if (pos > lpos)\n                            s->exponent_bands[k][j++] = pos - lpos;\n                        if (pos >= block_len)\n                            break;\n                        lpos = pos;\n                    }\n                    s->exponent_sizes[k] = j;\n                }\n            }\n            s->coefs_end[k] = (s->frame_len - ((s->frame_len * 9) / 100)) >> k;\n            s->high_band_start[k] = (int) ((block_len * 2 * high_freq) /\n                                           avctx->sample_rate + 0.5);\n            n   = s->exponent_sizes[k];\n            j   = 0;\n            pos = 0;\n            for (i = 0; i < n; i++) {\n                int start, end;\n                start = pos;\n                pos  += s->exponent_bands[k][i];\n                end   = pos;\n                if (start < s->high_band_start[k])\n                    start = s->high_band_start[k];\n                if (end > s->coefs_end[k])\n                    end = s->coefs_end[k];\n                if (end > start)\n                    s->exponent_high_bands[k][j++] = end - start;\n            }\n            s->exponent_high_sizes[k] = j;\n#if 0\n            tprintf(s->avctx, "%5d: coefs_end=%d high_band_start=%d nb_high_bands=%d: ",\n                    s->frame_len >> k,\n                    s->coefs_end[k],\n                    s->high_band_start[k],\n                    s->exponent_high_sizes[k]);\n            for (j = 0; j < s->exponent_high_sizes[k]; j++)\n                tprintf(s->avctx, " %d", s->exponent_high_bands[k][j]);\n            tprintf(s->avctx, "\\n");\n#endif\n        }\n    }\n#ifdef TRACE\n    {\n        int i, j;\n        for (i = 0; i < s->nb_block_sizes; i++) {\n            tprintf(s->avctx, "%5d: n=%2d:",\n                    s->frame_len >> i,\n                    s->exponent_sizes[i]);\n            for (j = 0; j < s->exponent_sizes[i]; j++)\n                tprintf(s->avctx, " %d", s->exponent_bands[i][j]);\n            tprintf(s->avctx, "\\n");\n        }\n    }\n#endif\n    for (i = 0; i < s->nb_block_sizes; i++) {\n        ff_init_ff_sine_windows(s->frame_len_bits - i);\n        s->windows[i] = ff_sine_windows[s->frame_len_bits - i];\n    }\n    s->reset_block_lengths = 1;\n    if (s->use_noise_coding) {\n        if (s->use_exp_vlc)\n            s->noise_mult = 0.02;\n        else\n            s->noise_mult = 0.04;\n#ifdef TRACE\n        for (i = 0; i < NOISE_TAB_SIZE; i++)\n            s->noise_table[i] = 1.0 * s->noise_mult;\n#else\n        {\n            unsigned int seed;\n            float norm;\n            seed = 1;\n            norm = (1.0 / (float) (1LL << 31)) * sqrt(3) * s->noise_mult;\n            for (i = 0; i < NOISE_TAB_SIZE; i++) {\n                seed              = seed * 314159 + 1;\n                s->noise_table[i] = (float) ((int) seed) * norm;\n            }\n        }\n#endif\n    }\n    coef_vlc_table = 2;\n    if (avctx->sample_rate >= 32000) {\n        if (bps1 < 0.72)\n            coef_vlc_table = 0;\n        else if (bps1 < 1.16)\n            coef_vlc_table = 1;\n    }\n    s->coef_vlcs[0] = &coef_vlcs[coef_vlc_table * 2];\n    s->coef_vlcs[1] = &coef_vlcs[coef_vlc_table * 2 + 1];\n    init_coef_vlc(&s->coef_vlc[0], &s->run_table[0], &s->level_table[0],\n                  &s->int_table[0], s->coef_vlcs[0]);\n    init_coef_vlc(&s->coef_vlc[1], &s->run_table[1], &s->level_table[1],\n                  &s->int_table[1], s->coef_vlcs[1]);\n    return 0;\n}']