libavcodec/amrnbdec.c:321: error: Buffer Overrun L2
  Offset: [3, 12] (⇐ 3 + [0, 9]) Size: 4 by call to `lsf2lsp_for_mode12k2`.

libavcodec/amrnbdec.c:304:1: Parameter `p->lsp[*]`
302.  * @param p                 pointer to the AMRContext
303.  */
304. static void lsf2lsp_5(AMRContext *p)
     ^
305. {
306.     const uint16_t *lsf_param = p->frame.lsf;

libavcodec/amrnbdec.c:321:5: Call
319. 
320.     lsf2lsp_for_mode12k2(p, p->lsp[1], lsf_no_r, lsf_quantizer, 0, lsf_param[2] & 1, 0);
321.     lsf2lsp_for_mode12k2(p, p->lsp[3], lsf_no_r, lsf_quantizer, 2, lsf_param[2] & 1, 1);
         ^
322. 
323.     // interpolate LSP vectors at subframes 1 and 3

libavcodec/amrnbdec.c:266:1: Parameter `*lsp`
  264.  * @param update store data for computing the next frame's LSFs
  265.  */
  266. static void lsf2lsp_for_mode12k2(AMRContext *p, double lsp[LP_FILTER_ORDER],
       ^
  267.                                  const float lsf_no_r[LP_FILTER_ORDER],
  268.                                  const int16_t *lsf_quantizer[5],

libavcodec/amrnbdec.c:296:5: Call
  294.         interpolate_lsf(p->lsf_q, lsf_q);
  295. 
  296.     lsf2lsp(lsf_q, lsp);
           ^
  297. }
  298. 

libavcodec/amrnbdec.c:234:10: <Offset trace>
232.     int i;
233. 
234.     for (i = 0; i < LP_FILTER_ORDER; i++)
              ^
235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
236. }

libavcodec/amrnbdec.c:234:10: Assignment
    232.     int i;
    233. 
    234.     for (i = 0; i < LP_FILTER_ORDER; i++)
                  ^
    235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
    236. }

libavcodec/amrnbdec.c:230:1: <Length trace>
228.  * @param lsp               output lsp vector
229.  */
230. static void lsf2lsp(const float *lsf, double *lsp)
     ^
231. {
232.     int i;

libavcodec/amrnbdec.c:230:1: Parameter `*lsp`
    228.  * @param lsp               output lsp vector
    229.  */
    230. static void lsf2lsp(const float *lsf, double *lsp)
         ^
    231. {
    232.     int i;

libavcodec/amrnbdec.c:235:9: Array access: Offset: [3, 12] (⇐ 3 + [0, 9]) Size: 4 by call to `lsf2lsp_for_mode12k2` 
    233. 
    234.     for (i = 0; i < LP_FILTER_ORDER; i++)
    235.         lsp[i] = cos(2.0 * M_PI * lsf[i]);
                 ^
    236. }
    237. 
