libavcodec/nellymoserenc.c:312: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: 128 by call to `ff_nelly_get_sample_bits`.

libavcodec/nellymoserenc.c:265:1: Array declaration
263.  *  @param output_size     size of output buffer
264.  */
265. static void encode_block(NellyMoserEncodeContext *s, unsigned char *output, int output_size)
     ^
266. {
267.     PutBitContext pb;

libavcodec/nellymoserenc.c:312:5: Call
310.     }
311. 
312.     ff_nelly_get_sample_bits(pows, bits);
         ^
313. 
314.     for (block = 0; block < 2; block++) {

libavcodec/nellymoser.c:216:15: <Offset trace>
214. 
215.     if (bitsum > NELLY_DETAIL_BITS) {
216.         tmp = i = 0;
                   ^
217.         while (tmp < NELLY_DETAIL_BITS) {
218.             tmp += bits[i];

libavcodec/nellymoser.c:216:15: Assignment
  214. 
  215.     if (bitsum > NELLY_DETAIL_BITS) {
  216.         tmp = i = 0;
                     ^
  217.         while (tmp < NELLY_DETAIL_BITS) {
  218.             tmp += bits[i];

libavcodec/nellymoser.c:119:1: <Length trace>
117. 
118. 
119. void ff_nelly_get_sample_bits(const float *buf, int *bits)
     ^
120. {
121.     int i, j;

libavcodec/nellymoser.c:119:1: Parameter `*bits`
  117. 
  118. 
  119. void ff_nelly_get_sample_bits(const float *buf, int *bits)
       ^
  120. {
  121.     int i, j;

libavcodec/nellymoser.c:222:9: Array access: Offset: [-1, +oo] Size: 128 by call to `ff_nelly_get_sample_bits` 
  220.         }
  221. 
  222.         bits[i-1] -= tmp - NELLY_DETAIL_BITS;
               ^
  223.         for(; i < NELLY_FILL_LEN; i++)
  224.             bits[i] = 0;
