libavcodec/amrnbdec.c:360: error: Buffer Overrun L2
  Offset: [3, 12] (⇐ 3 + [0, 9]) Size: 4 by call to `lsf2lsp`.

libavcodec/amrnbdec.c:333:1: Parameter `p->lsp[*]`
331.  * @param p                 pointer to the AMRContext
332.  */
333. static void lsf2lsp_3(AMRContext *p)
     ^
334. {
335.     const uint16_t *lsf_param = p->frame.lsf;

libavcodec/amrnbdec.c:360:5: Call
358.     memcpy(p->prev_lsf_r, lsf_r, LP_FILTER_ORDER * sizeof(*lsf_r));
359. 
360.     lsf2lsp(lsf_q, p->lsp[3]);
         ^
361. 
362.     // interpolate LSP vectors at subframes 1, 2 and 3

libavcodec/amrnbdec.c:234:10: <Offset trace>
232.     int i;
233. 
234.     for (i = 0; i < LP_FILTER_ORDER; i++)
              ^
235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
236. }

libavcodec/amrnbdec.c:234:10: Assignment
  232.     int i;
  233. 
  234.     for (i = 0; i < LP_FILTER_ORDER; i++)
                ^
  235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
  236. }

libavcodec/amrnbdec.c:230:1: <Length trace>
228.  * @param lsp               output lsp vector
229.  */
230. static void lsf2lsp(const float *lsf, double *lsp)
     ^
231. {
232.     int i;

libavcodec/amrnbdec.c:230:1: Parameter `*lsp`
  228.  * @param lsp               output lsp vector
  229.  */
  230. static void lsf2lsp(const float *lsf, double *lsp)
       ^
  231. {
  232.     int i;

libavcodec/amrnbdec.c:235:9: Array access: Offset: [3, 12] (⇐ 3 + [0, 9]) Size: 4 by call to `lsf2lsp` 
  233. 
  234.     for (i = 0; i < LP_FILTER_ORDER; i++)
  235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
               ^
  236. }
  237. 
