libavcodec/wmaprodec.c:1238: error: Buffer Overrun L3
  Offset: [-6, +oo] Size: 8.

libavcodec/wmaprodec.c:1238:41: <Offset trace>
1236. 
1237.     if (transmit_coeffs) {
1238.         FFTContext *mdct = &s->mdct_ctx[av_log2(subframe_len) - WMAPRO_BLOCK_MIN_BITS];
                                              ^
1239.         /** reconstruct the per channel data */
1240.         inverse_channel_transform(s);

libavcodec/wmaprodec.c:1238:41: Call
1236. 
1237.     if (transmit_coeffs) {
1238.         FFTContext *mdct = &s->mdct_ctx[av_log2(subframe_len) - WMAPRO_BLOCK_MIN_BITS];
                                              ^
1239.         /** reconstruct the per channel data */
1240.         inverse_channel_transform(s);

libavutil/common.h:67:1: Global `ff_log2_tab`
  65. extern const uint8_t av_reverse[256];
  66. 
  67. static av_always_inline av_const int av_log2_c(unsigned int v)
      ^
  68. {
  69.     int n = 0;

libavutil/common.h:78:5: Assignment
  76.         n += 8;
  77.     }
  78.     n += ff_log2_tab[v];
          ^
  79. 
  80.     return n;

libavutil/common.h:80:5: Assignment
  78.     n += ff_log2_tab[v];
  79. 
  80.     return n;
          ^
  81. }
  82. 

libavcodec/wmaprodec.c:1058:1: <Length trace>
1056.  *@return 0 on success, < 0 when decoding failed
1057.  */
1058. static int decode_subframe(WMAProDecodeCtx *s)
      ^
1059. {
1060.     int offset = s->samples_per_frame;

libavcodec/wmaprodec.c:1058:1: Parameter `s->mdct_ctx[*]`
1056.  *@return 0 on success, < 0 when decoding failed
1057.  */
1058. static int decode_subframe(WMAProDecodeCtx *s)
      ^
1059. {
1060.     int offset = s->samples_per_frame;

libavcodec/wmaprodec.c:1238:9: Array access: Offset: [-6, +oo] Size: 8
1236. 
1237.     if (transmit_coeffs) {
1238.         FFTContext *mdct = &s->mdct_ctx[av_log2(subframe_len) - WMAPRO_BLOCK_MIN_BITS];
              ^
1239.         /** reconstruct the per channel data */
1240.         inverse_channel_transform(s);
