libavcodec/qdm2.c:1944: error: Buffer Overrun L1
  Offset: [16, +oo] Size: 4 by call to `qdm2_decode`.

libavcodec/qdm2.c:1937:16: Call
1935.     /* get output buffer */
1936.     frame->nb_samples = 16 * s->frame_size;
1937.     if ((ret = ff_get_buffer(avctx, frame, 0)) < 0) {
                     ^
1938.         av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n");
1939.         return ret;

libavcodec/utils.c:549:1: Parameter `*frame->buf[*]`
  547. #endif
  548. 
  549. int ff_get_buffer(AVCodecContext *avctx, AVFrame *frame, int flags)
       ^
  550. {
  551.     int ret;

libavcodec/qdm2.c:1944:13: Call
1942. 
1943.     for (i = 0; i < 16; i++) {
1944.         if (qdm2_decode(s, buf, out) < 0)
                  ^
1945.             return -1;
1946.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1860:1: Parameter `q->fft_tones[*].duration`
  1858. 
  1859. 
  1860. static int qdm2_decode (QDM2Context *q, const uint8_t *in, int16_t *out)
        ^
  1861. {
  1862.     int ch, i;

libavcodec/qdm2.c:1885:9: Call
  1883.             qdm2_decode_fft_packets(q);
  1884. 
  1885.         qdm2_fft_tone_synthesizer(q, q->sub_packet);
                ^
  1886.     }
  1887. 

libavcodec/qdm2.c:1520:1: Parameter `q->fft_tones[*].duration`
    1518. 
    1519. 
    1520. static void qdm2_fft_tone_synthesizer (QDM2Context *q, int sub_packet)
          ^
    1521. {
    1522.     int i, j, ch;

libavcodec/qdm2.c:1552:9: Call
    1550.     /* generate existing FFT tones */
    1551.     for (i = q->fft_tone_end; i != q->fft_tone_start; ) {
    1552.         qdm2_fft_generate_tone(q, &q->fft_tones[q->fft_tone_start]);
                  ^
    1553.         q->fft_tone_start = (q->fft_tone_start + 1) % 1000;
    1554.     }

libavcodec/qdm2.c:1475:1: <Offset trace>
1473. 
1474. 
1475. static void qdm2_fft_generate_tone (QDM2Context *q, FFTTone *tone)
      ^
1476. {
1477.    float level, f[6];

libavcodec/qdm2.c:1475:1: Parameter `tone->duration`
      1473. 
      1474. 
      1475. static void qdm2_fft_generate_tone (QDM2Context *q, FFTTone *tone)
            ^
      1476. {
      1477.    float level, f[6];

libavcodec/qdm2data.h:476:1: <Length trace>
474. } };
475. 
476. static const float fft_tone_envelope_table[4][31] = {
     ^
477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2data.h:476:1: Array declaration
      474. } };
      475. 
      476. static const float fft_tone_envelope_table[4][31] = {
           ^
      477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
      478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2.c:1485:13: Array access: Offset: [16, +oo] Size: 4 by call to `qdm2_decode` 
      1483. 
      1484.     /* calculate current level (maximum amplitude) of tone */
      1485.     level = fft_tone_envelope_table[tone->duration][tone->time_index] * tone->level;
                        ^
      1486.     c.im = level * sin(tone->phase*iscale);
      1487.     c.re = level * cos(tone->phase*iscale);
