libavcodec/wmavoice.c:1786: error: Buffer Overrun L2
  Offset: [2, 11] (⇐ 2 + [0, 9]) Size: 3 by call to `dequant_lsp10r`.

libavcodec/wmavoice.c:1732:1: Array declaration
1730.  *         fully parse the superframe
1731.  */
1732. static int synth_superframe(AVCodecContext *ctx, int *got_frame_ptr)
      ^
1733. {
1734.     WMAVoiceContext *s = ctx->priv_data;

libavcodec/wmavoice.c:1786:13: Call
1784. 
1785.         if (s->lsps == 10) {
1786.             dequant_lsp10r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
                  ^
1787.         } else /* s->lsps == 16 */
1788.             dequant_lsp16r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);

libavcodec/wmavoice.c:878:1: Parameter `*i_lsps`
  876.  * generate LSPs for the other frames from them (residual coding).
  877.  */
  878. static void dequant_lsp10r(GetBitContext *gb,
       ^
  879.                            double *i_lsps, const double *old,
  880.                            double *a1, double *a2, int q_mode)

libavcodec/wmavoice.c:894:5: Call
  892.     int n;
  893. 
  894.     dequant_lsp10i(gb, i_lsps);
           ^
  895. 
  896.     interpol = get_bits(gb, 5);

libavcodec/wmavoice.c:852:1: Parameter `*lsps`
    850.  * Parse 10 independently-coded LSPs.
    851.  */
    852. static void dequant_lsp10i(GetBitContext *gb, double *lsps)
         ^
    853. {
    854.     static const uint16_t vec_sizes[4] = { 256, 64, 32, 32 };

libavcodec/wmavoice.c:870:5: Call
    868.     v[3] = get_bits(gb, 5);
    869. 
    870.     dequant_lsps(lsps, 10, v, vec_sizes, 4, wmavoice_dq_lsp10i,
             ^
    871.                  mul_lsf, base_lsf);
    872. }

libavcodec/wmavoice.c:820:1: <Offset trace>
818.  * @param base_q base (lowest) LSF values
819.  */
820. static void dequant_lsps(double *lsps, int num,
     ^
821.                          const uint16_t *values,
822.                          const uint16_t *sizes,

libavcodec/wmavoice.c:820:1: Parameter `num`
      818.  * @param base_q base (lowest) LSF values
      819.  */
      820. static void dequant_lsps(double *lsps, int num,
           ^
      821.                          const uint16_t *values,
      822.                          const uint16_t *sizes,

libavcodec/wmavoice.c:820:1: <Length trace>
818.  * @param base_q base (lowest) LSF values
819.  */
820. static void dequant_lsps(double *lsps, int num,
     ^
821.                          const uint16_t *values,
822.                          const uint16_t *sizes,

libavcodec/wmavoice.c:820:1: Parameter `*lsps`
      818.  * @param base_q base (lowest) LSF values
      819.  */
      820. static void dequant_lsps(double *lsps, int num,
           ^
      821.                          const uint16_t *values,
      822.                          const uint16_t *sizes,

libavcodec/wmavoice.c:835:13: Array access: Offset: [2, 11] (⇐ 2 + [0, 9]) Size: 3 by call to `dequant_lsp10r` 
      833. 
      834.         for (m = 0; m < num; m++)
      835.             lsps[m] += base + mul * t_off[m];
                       ^
      836. 
      837.         table += sizes[n] * num;
