libavcodec/mpegaudiodec.c:2598: error: Buffer Overrun L1
  Offset: [368, +oo] (⇐ [48, +oo] + 320) Size: 2 by call to `mp_decode_frame`.

libavcodec/mpegaudiodec.c:2563:1: Parameter `*buf`
2561. 
2562. 
2563. static int decode_frame_mp3on4(AVCodecContext * avctx,
      ^
2564.                         void *data, int *data_size,
2565.                         const uint8_t * buf, int buf_size)

libavcodec/mpegaudiodec.c:2592:9: Assignment
2590.         assert (m != NULL);
2591. 
2592.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
              ^
2593. 
2594.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavcodec/mpegaudiodec.c:2597:9: Call
2595.             break;
2596. 
2597.         ff_mpegaudio_decode_header(m, header);
              ^
2598.         out_size += mp_decode_frame(m, outptr, buf, fsize);
2599.         buf += fsize;

libavcodec/mpegaudiodecheader.c:39:9: Assignment
  37.     if (header & (1<<20)) {
  38.         s->lsf = (header & (1<<19)) ? 0 : 1;
  39.         mpeg25 = 0;
              ^
  40.     } else {
  41.         s->lsf = 1;

libavcodec/mpegaudiodecheader.c:49:5: Assignment
  47.     sample_rate_index = (header >> 10) & 3;
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
          ^
  50.     s->sample_rate_index = sample_rate_index;
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;

libavcodec/mpegaudiodecheader.c:50:5: Assignment
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
  50.     s->sample_rate_index = sample_rate_index;
          ^
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;
  52.     s->sample_rate = sample_rate;

libavcodec/mpegaudiodec.c:2598:21: Call
2596. 
2597.         ff_mpegaudio_decode_header(m, header);
2598.         out_size += mp_decode_frame(m, outptr, buf, fsize);
                          ^
2599.         buf += fsize;
2600.         len -= fsize;

libavcodec/mpegaudiodec.c:2280:1: Parameter `s->synth_buf[*]`
  2278. }
  2279. 
  2280. static int mp_decode_frame(MPADecodeContext *s,
        ^
  2281.                            OUT_INT *samples, const uint8_t *buf, int buf_size)
  2282. {

libavcodec/mpegaudiodec.c:2349:13: Call
  2347.         samples_ptr = samples + ch;
  2348.         for(i=0;i<nb_frames;i++) {
  2349.             ff_mpa_synth_filter(s->synth_buf[ch], &(s->synth_buf_offset[ch]),
                    ^
  2350.                          window, &s->dither_state,
  2351.                          samples_ptr, s->nb_channels,

libavcodec/mpegaudiodec.c:849:1: <Length trace>
847.    32 samples. */
848. /* XXX: optimize by avoiding ring buffer usage */
849. void ff_mpa_synth_filter(MPA_INT *synth_buf_ptr, int *synth_buf_offset,
     ^
850.                          MPA_INT *window, int *dither_state,
851.                          OUT_INT *samples, int incr,

libavcodec/mpegaudiodec.c:849:1: Parameter `*synth_buf_ptr`
    847.    32 samples. */
    848. /* XXX: optimize by avoiding ring buffer usage */
    849. void ff_mpa_synth_filter(MPA_INT *synth_buf_ptr, int *synth_buf_offset,
         ^
    850.                          MPA_INT *window, int *dither_state,
    851.                          OUT_INT *samples, int incr,

libavcodec/mpegaudiodec.c:868:5: Assignment
    866. 
    867.     offset = *synth_buf_offset;
    868.     synth_buf = synth_buf_ptr + offset;
             ^
    869. 
    870.     for(j=0;j<32;j++) {

libavcodec/mpegaudiodec.c:889:5: Assignment
    887.     p = synth_buf + 16;
    888.     SUM8(sum, +=, w, p);
    889.     p = synth_buf + 48;
             ^
    890.     SUM8(sum, -=, w + 32, p);
    891.     *samples = round_sample(&sum);

libavcodec/mpegaudiodec.c:890:5: Array access: Offset: [368, +oo] (⇐ [48, +oo] + 320) Size: 2 by call to `mp_decode_frame` 
    888.     SUM8(sum, +=, w, p);
    889.     p = synth_buf + 48;
    890.     SUM8(sum, -=, w + 32, p);
             ^
    891.     *samples = round_sample(&sum);
    892.     samples += incr;
