libavcodec/aac.c:1988: error: Buffer Overrun L1
  Offset: -1 Size: 7 by call to `output_configure`.

libavcodec/aac.c:1988:23: Call
1986.                        "Not evaluating a further program_config_element as this construct is dubious at best.\n");
1987.             else
1988.                 err = output_configure(ac, ac->che_pos, new_che_pos, 0, OC_TRIAL_PCE);
                            ^
1989.             break;
1990.         }

libavcodec/aac.c:199:1: <Offset trace>
197.  * @return  Returns error status. 0 - OK, !0 - error
198.  */
199. static av_cold int output_configure(AACContext *ac,
     ^
200.                             enum ChannelPosition che_pos[4][MAX_ELEM_ID],
201.                             enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aac.c:199:1: Parameter `channel_config`
  197.  * @return  Returns error status. 0 - OK, !0 - error
  198.  */
  199. static av_cold int output_configure(AACContext *ac,
       ^
  200.                             enum ChannelPosition che_pos[4][MAX_ELEM_ID],
  201.                             enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aacdectab.h:74:1: <Length trace>
72. static const int8_t tags_per_config[16] = { 0, 1, 1, 2, 3, 3, 4, 5, 0, 0, 0, 0, 0, 0, 0, 0 };
73. 
74. static const uint8_t aac_channel_layout_map[7][5][2] = {
    ^
75.     { { TYPE_SCE, 0 }, },
76.     { { TYPE_CPE, 0 }, },

libavcodec/aacdectab.h:74:1: Array declaration
  72. static const int8_t tags_per_config[16] = { 0, 1, 1, 2, 3, 3, 4, 5, 0, 0, 0, 0, 0, 0, 0, 0 };
  73. 
  74. static const uint8_t aac_channel_layout_map[7][5][2] = {
      ^
  75.     { { TYPE_SCE, 0 }, },
  76.     { { TYPE_CPE, 0 }, },

libavcodec/aac.c:212:38: Array access: Offset: -1 Size: 7 by call to `output_configure` 
  210.         for (i = 0; i < tags_per_config[channel_config]; i++) {
  211.             if ((ret = che_configure(ac, che_pos,
  212.                                      aac_channel_layout_map[channel_config - 1][i][0],
                                            ^
  213.                                      aac_channel_layout_map[channel_config - 1][i][1],
  214.                                      &channels)))
