libavcodec/amrwbdec.c:659: error: Buffer Overrun L2
  Offset: [1, 125] Size: 2 by call to `ff_celp_circ_addf`.

libavcodec/amrwbdec.c:657:14: Assignment
655. 
656.         memset(buf, 0, sizeof(float) * AMRWB_SFR_SIZE);
657.         for (i = 0; i < AMRWB_SFR_SIZE; i++)
                  ^
658.             if (fixed_vector[i])
659.                 ff_celp_circ_addf(buf, buf, coef, i, fixed_vector[i],

libavcodec/amrwbdec.c:659:17: Call
657.         for (i = 0; i < AMRWB_SFR_SIZE; i++)
658.             if (fixed_vector[i])
659.                 ff_celp_circ_addf(buf, buf, coef, i, fixed_vector[i],
                     ^
660.                                   AMRWB_SFR_SIZE);
661.         fixed_vector = buf;

libavcodec/celp_filters.c:48:1: <Offset trace>
46. }
47. 
48. void ff_celp_circ_addf(float *out, const float *in,
    ^
49.                        const float *lagged, int lag, float fac, int n)
50. {

libavcodec/celp_filters.c:48:1: Parameter `lag`
  46. }
  47. 
  48. void ff_celp_circ_addf(float *out, const float *in,
      ^
  49.                        const float *lagged, int lag, float fac, int n)
  50. {

libavcodec/celp_filters.c:48:1: <Length trace>
46. }
47. 
48. void ff_celp_circ_addf(float *out, const float *in,
    ^
49.                        const float *lagged, int lag, float fac, int n)
50. {

libavcodec/celp_filters.c:48:1: Parameter `*lagged`
  46. }
  47. 
  48. void ff_celp_circ_addf(float *out, const float *in,
      ^
  49.                        const float *lagged, int lag, float fac, int n)
  50. {

libavcodec/celp_filters.c:53:32: Array access: Offset: [1, 125] Size: 2 by call to `ff_celp_circ_addf` 
  51.     int k;
  52.     for (k = 0; k < lag; k++)
  53.         out[k] = in[k] + fac * lagged[n + k - lag];
                                     ^
  54.     for (; k < n; k++)
  55.         out[k] = in[k] + fac * lagged[    k - lag];
