libavcodec/qdm2.c:1967: error: Buffer Overrun L1
  Offset: [31, +oo] (⇐ [0, +oo] + 31) Size: 2 by call to `qdm2_decode`.

libavcodec/qdm2.c:1967:13: Call
1965. 
1966.     for (i = 0; i < 16; i++) {
1967.         if (qdm2_decode(s, buf, out) < 0)
                  ^
1968.             return -1;
1969.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1911:13: Call
  1909.     if (!q->has_errors) {
  1910.         if (q->sub_packet == 2)
  1911.             qdm2_decode_fft_packets(q);
                    ^
  1912. 
  1913.         qdm2_fft_tone_synthesizer(q, q->sub_packet);

libavcodec/qdm2.c:1967:13: Call
1965. 
1966.     for (i = 0; i < 16; i++) {
1967.         if (qdm2_decode(s, buf, out) < 0)
                  ^
1968.             return -1;
1969.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1886:1: Parameter `q->synth_buf_offset[*]`
  1884. 
  1885. 
  1886. static int qdm2_decode (QDM2Context *q, const uint8_t *in, int16_t *out)
        ^
  1887. {
  1888.     int ch, i;

libavcodec/qdm2.c:1928:9: Call
  1926.     /* sound synthesis stage 2 (MPEG audio like synthesis filter) */
  1927.     if (!q->has_errors && q->do_synth_filter)
  1928.         qdm2_synthesis_filter(q, q->sub_packet);
                ^
  1929. 
  1930.     q->sub_packet = (q->sub_packet + 1) % 16;

libavcodec/qdm2.c:1602:1: Parameter `q->synth_buf[*]`
    1600.  * @param index    subpacket number
    1601.  */
    1602. static void qdm2_synthesis_filter (QDM2Context *q, int index)
          ^
    1603. {
    1604.     OUT_INT samples[MPA_MAX_CHANNELS * MPA_FRAME_SIZE];

libavcodec/qdm2.c:1619:13: Call
    1617. 
    1618.         for (i = 0; i < 8; i++) {
    1619.             ff_mpa_synth_filter(q->synth_buf[ch], &(q->synth_buf_offset[ch]),
                      ^
    1620.                 ff_mpa_synth_window, &dither_state,
    1621.                 samples_ptr, q->nb_channels,

libavcodec/mpegaudiodec.c:705:1: Parameter `*synth_buf_ptr`
      703. /* XXX: optimize by avoiding ring buffer usage */
      704. #if !CONFIG_FLOAT
      705. void ff_mpa_synth_filter(MPA_INT *synth_buf_ptr, int *synth_buf_offset,
           ^
      706.                          MPA_INT *window, int *dither_state,
      707.                          OUT_INT *samples, int incr,

libavcodec/mpegaudiodec.c:718:5: Assignment
      716. 
      717.     offset = *synth_buf_offset;
      718.     synth_buf = synth_buf_ptr + offset;
               ^
      719. 
      720. #if FRAC_BITS <= 15

libavcodec/mpegaudiodec.c:728:5: Call
      726.     }
      727. #else
      728.     dct32(synth_buf, sb_samples);
               ^
      729. #endif
      730. 

libavcodec/dct32.c:106:1: <Length trace>
104. 
105. /* DCT32 without 1/sqrt(2) coef zero scaling. */
106. static void dct32(INTFLOAT *out, const INTFLOAT *tab)
     ^
107. {
108.     INTFLOAT tmp0, tmp1;

libavcodec/dct32.c:106:1: Parameter `*out`
        104. 
        105. /* DCT32 without 1/sqrt(2) coef zero scaling. */
        106. static void dct32(INTFLOAT *out, const INTFLOAT *tab)
             ^
        107. {
        108.     INTFLOAT tmp0, tmp1;

libavcodec/dct32.c:266:5: Array access: Offset: [31, +oo] (⇐ [0, +oo] + 31) Size: 2 by call to `qdm2_decode` 
        264.     out[23] = val29 + val19;
        265.     out[15] = val30 + val17;
        266.     out[31] = val31;
                 ^
        267. }
