libavcodec/wmavoice.c:1819: error: Buffer Overrun L2
  Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i`.

libavcodec/wmavoice.c:1734:1: Array declaration
1732.  *         fully parse the superframe
1733.  */
1734. static int synth_superframe(AVCodecContext *ctx, AVFrame *frame,
      ^
1735.                             int *got_frame_ptr)
1736. {

libavcodec/wmavoice.c:1819:17: Call
1817.                 dequant_lsp10i(gb, lsps[n]);
1818.             } else /* s->lsps == 16 */
1819.                 dequant_lsp16i(gb, lsps[n]);
                      ^
1820. 
1821.             for (m = 0; m < s->lsps; m++)

libavcodec/wmavoice.c:917:1: Parameter `*lsps`
  915.  * Parse 16 independently-coded LSPs.
  916.  */
  917. static void dequant_lsp16i(GetBitContext *gb, double *lsps)
       ^
  918. {
  919.     static const uint16_t vec_sizes[5] = { 256, 64, 128, 64, 128 };

libavcodec/wmavoice.c:938:5: Call
  936.     v[4] = get_bits(gb, 7);
  937. 
  938.     dequant_lsps( lsps,     5,  v,     vec_sizes,    2,
           ^
  939.                  wmavoice_dq_lsp16i1,  mul_lsf,     base_lsf);
  940.     dequant_lsps(&lsps[5],  5, &v[2], &vec_sizes[2], 2,

libavcodec/wmavoice.c:823:1: <Offset trace>
821.  * @param base_q base (lowest) LSF values
822.  */
823. static void dequant_lsps(double *lsps, int num,
     ^
824.                          const uint16_t *values,
825.                          const uint16_t *sizes,

libavcodec/wmavoice.c:823:1: Parameter `num`
    821.  * @param base_q base (lowest) LSF values
    822.  */
    823. static void dequant_lsps(double *lsps, int num,
         ^
    824.                          const uint16_t *values,
    825.                          const uint16_t *sizes,

libavcodec/wmavoice.c:823:1: <Length trace>
821.  * @param base_q base (lowest) LSF values
822.  */
823. static void dequant_lsps(double *lsps, int num,
     ^
824.                          const uint16_t *values,
825.                          const uint16_t *sizes,

libavcodec/wmavoice.c:823:1: Parameter `*lsps`
    821.  * @param base_q base (lowest) LSF values
    822.  */
    823. static void dequant_lsps(double *lsps, int num,
         ^
    824.                          const uint16_t *values,
    825.                          const uint16_t *sizes,

libavcodec/wmavoice.c:838:13: Array access: Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i` 
    836. 
    837.         for (m = 0; m < num; m++)
    838.             lsps[m] += base + mul * t_off[m];
                     ^
    839. 
    840.         table += sizes[n] * num;
