libavcodec/sipr.c:587: error: Buffer Overrun L3
  Offset: [5, +oo] (⇐ [0, +oo] + [5, 10]) Size: [0, +oo] by call to `decode_frame`.

libavcodec/sipr.c:586:9: Call
584. 
585.     for (i = 0; i < ctx->m.frames_per_packet; i++) {
586.         decode_parameters(&parm, &gb, &ctx->m);
             ^
587.         decode_frame(ctx, &parm, data);
588. 

libavcodec/sipr.c:214:1: Parameter `p->subframe_count`
  212.  * @param pgb            pointer to initialized GetBitContext structure
  213.  */
  214. static void decode_parameters(SiprParameters* parms, GetBitContext *pgb,
       ^
  215.                               const SiprModeParam *p)
  216. {

libavcodec/sipr.c:587:9: Call
585.     for (i = 0; i < ctx->m.frames_per_packet; i++) {
586.         decode_parameters(&parm, &gb, &ctx->m);
587.         decode_frame(ctx, &parm, data);
             ^
588. 
589.         data += SUBFR_SIZE * ctx->m.subframe_count;

libavcodec/sipr.c:407:1: Parameter `ctx->m.subframe_count`
  405. }
  406. 
  407. static void decode_frame(SiprContext *ctx, SiprParameters *params,
       ^
  408.                          float *out_data)
  409. {

libavcodec/sipr.c:586:9: Call
584. 
585.     for (i = 0; i < ctx->m.frames_per_packet; i++) {
586.         decode_parameters(&parm, &gb, &ctx->m);
             ^
587.         decode_frame(ctx, &parm, data);
588. 

libavcodec/sipr.c:214:1: Parameter `p->subframe_count`
  212.  * @param pgb            pointer to initialized GetBitContext structure
  213.  */
  214. static void decode_parameters(SiprParameters* parms, GetBitContext *pgb,
       ^
  215.                               const SiprModeParam *p)
  216. {

libavcodec/sipr.c:587:9: Call
585.     for (i = 0; i < ctx->m.frames_per_packet; i++) {
586.         decode_parameters(&parm, &gb, &ctx->m);
587.         decode_frame(ctx, &parm, data);
             ^
588. 
589.         data += SUBFR_SIZE * ctx->m.subframe_count;

libavcodec/sipr.c:407:1: Parameter `ctx->m.subframe_count`
  405. }
  406. 
  407. static void decode_frame(SiprContext *ctx, SiprParameters *params,
       ^
  408.                          float *out_data)
  409. {

libavcodec/sipr.c:432:9: Assignment
  430. 
  431.     for (i = 0; i < ctx->m.subframe_count; i++) {
  432.         float *pAz = Az + i*LP_FILTER_ORDER;
               ^
  433.         float fixed_vector[SUBFR_SIZE];
  434.         int T0,T0_frac;

libavcodec/sipr.c:483:13: Call
  481.             postfilter_5k0(ctx, pAz, fixed_vector);
  482. 
  483.             ff_celp_lp_synthesis_filterf(ctx->postfilter_syn5k0 + LP_FILTER_ORDER + i*SUBFR_SIZE,
                   ^
  484.                                          pAz, excitation, SUBFR_SIZE,
  485.                                          LP_FILTER_ORDER);

libavcodec/celp_filters.c:83:1: <Offset trace>
81. }
82. 
83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
    ^
84.                                   const float* in, int buffer_length,
85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: Parameter `filter_length`
    81. }
    82. 
    83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
        ^
    84.                                   const float* in, int buffer_length,
    85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: <Length trace>
81. }
82. 
83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
    ^
84.                                   const float* in, int buffer_length,
85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: Parameter `*filter_coeffs`
    81. }
    82. 
    83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
        ^
    84.                                   const float* in, int buffer_length,
    85.                                   int filter_length)

libavcodec/celp_filters.c:141:19: Array access: Offset: [5, +oo] (⇐ [0, +oo] + [5, 10]) Size: [0, +oo] by call to `decode_frame` 
    139.             old_out2 = out[-i-1];
    140. 
    141.             val = filter_coeffs[i];
                           ^
    142. 
    143.             out0 -= val * old_out2;
