libavcodec/wmavoice.c:1350: error: Buffer Overrun L2
  Offset: [0, 11] (⇐ [0, 2] + [0, 9]) Size: 3 by call to `dequant_lsp10i`.

libavcodec/wmavoice.c:1280:1: Array declaration
1278.  *         fully parse the superframe
1279.  */
1280. static int synth_superframe(AVCodecContext *ctx,
      ^
1281.                             float *samples, int *data_size)
1282. {

libavcodec/wmavoice.c:1350:17: Call
1348. 
1349.             if (s->lsps == 10) {
1350.                 dequant_lsp10i(gb, lsps[n]);
                      ^
1351.             } else /* s->lsps == 16 */
1352.                 dequant_lsp16i(gb, lsps[n]);

libavcodec/wmavoice.c:415:1: Parameter `*lsps`
  413.  * Parse 10 independently-coded LSPs.
  414.  */
  415. static void dequant_lsp10i(GetBitContext *gb, double *lsps)
       ^
  416. {
  417.     static const uint16_t vec_sizes[4] = { 256, 64, 32, 32 };

libavcodec/wmavoice.c:433:5: Call
  431.     v[3] = get_bits(gb, 5);
  432. 
  433.     dequant_lsps(lsps, 10, v, vec_sizes, 4, wmavoice_dq_lsp10i,
           ^
  434.                  mul_lsf, base_lsf);
  435. }

libavcodec/wmavoice.c:383:1: <Offset trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `num`
    381.  * @param base_q base (lowest) LSF values
    382.  */
    383. static void dequant_lsps(double *lsps, int num,
         ^
    384.                          const uint16_t *values,
    385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: <Length trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `*lsps`
    381.  * @param base_q base (lowest) LSF values
    382.  */
    383. static void dequant_lsps(double *lsps, int num,
         ^
    384.                          const uint16_t *values,
    385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:398:13: Array access: Offset: [0, 11] (⇐ [0, 2] + [0, 9]) Size: 3 by call to `dequant_lsp10i` 
    396. 
    397.         for (m = 0; m < num; m++)
    398.             lsps[m] += base + mul * t_off[m];
                     ^
    399. 
    400.         table += sizes[n] * num;
