libavcodec/qcelpdec.c:233: error: Buffer Overrun L3
  Offset: [-1, 14] Size: 16.

libavcodec/qcelpdec.c:224:29: <Offset trace>
222.         switch(q->bitrate)
223.         {
224.             case RATE_FULL: subframes_count = 16; break;
                                 ^
225.             case RATE_HALF: subframes_count = 4;  break;
226.             default:        subframes_count = 5;

libavcodec/qcelpdec.c:224:29: Assignment
222.         switch(q->bitrate)
223.         {
224.             case RATE_FULL: subframes_count = 16; break;
                                 ^
225.             case RATE_HALF: subframes_count = 4;  break;
226.             default:        subframes_count = 5;

libavcodec/qcelpdec.c:215:1: <Length trace>
213.  * TIA/EIA/IS-733 2.4.6.2
214.  */
215. static void decode_gain_and_index(QCELPContext  *q,
     ^
216.                                   float *gain) {
217.     int   i, subframes_count, g1[16];

libavcodec/qcelpdec.c:215:1: Array declaration
213.  * TIA/EIA/IS-733 2.4.6.2
214.  */
215. static void decode_gain_and_index(QCELPContext  *q,
     ^
216.                                   float *gain) {
217.     int   i, subframes_count, g1[16];

libavcodec/qcelpdec.c:233:35: Array access: Offset: [-1, 14] Size: 16
231.             if(q->bitrate == RATE_FULL && !((i+1) & 3))
232.             {
233.                 g1[i] += av_clip((g1[i-1] + g1[i-2] + g1[i-3]) / 3 - 6, 0, 32);
                                       ^
234.             }
235. 
