libavcodec/wmavoice.c:1333: error: Buffer Overrun L1
  Offset: [7, 11] (⇐ 7 + [0, 4]) Size: 3 by call to `dequant_lsp16r`.

libavcodec/wmavoice.c:1280:1: Array declaration
1278.  *         fully parse the superframe
1279.  */
1280. static int synth_superframe(AVCodecContext *ctx,
      ^
1281.                             float *samples, int *data_size)
1282. {

libavcodec/wmavoice.c:1333:13: Call
1331.             dequant_lsp10r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
1332.         } else /* s->lsps == 16 */
1333.             dequant_lsp16r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
                  ^
1334. 
1335.         for (n = 0; n < s->lsps; n++) {

libavcodec/wmavoice.c:510:1: Parameter `*i_lsps`
  508.  * generate LSPs for the other frames from them (residual coding).
  509.  */
  510. static void dequant_lsp16r(GetBitContext *gb,
       ^
  511.                            double *i_lsps, const double *old,
  512.                            double *a1, double *a2, int q_mode)

libavcodec/wmavoice.c:526:5: Call
  524.     int n;
  525. 
  526.     dequant_lsp16i(gb, i_lsps);
           ^
  527. 
  528.     interpol = get_bits(gb, 5);

libavcodec/wmavoice.c:477:1: Parameter `*lsps`
    475.  * Parse 16 independently-coded LSPs.
    476.  */
    477. static void dequant_lsp16i(GetBitContext *gb, double *lsps)
         ^
    478. {
    479.     static const uint16_t vec_sizes[5] = { 256, 64, 128, 64, 128 };

libavcodec/wmavoice.c:500:5: Call
    498.     dequant_lsps( lsps,     5,  v,     vec_sizes,    2,
    499.                  wmavoice_dq_lsp16i1,  mul_lsf,     base_lsf);
    500.     dequant_lsps(&lsps[5],  5, &v[2], &vec_sizes[2], 2,
             ^
    501.                  wmavoice_dq_lsp16i2, &mul_lsf[2], &base_lsf[2]);
    502.     dequant_lsps(&lsps[10], 6, &v[4], &vec_sizes[4], 1,

libavcodec/wmavoice.c:383:1: <Offset trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `num`
      381.  * @param base_q base (lowest) LSF values
      382.  */
      383. static void dequant_lsps(double *lsps, int num,
           ^
      384.                          const uint16_t *values,
      385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: <Length trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `*lsps`
      381.  * @param base_q base (lowest) LSF values
      382.  */
      383. static void dequant_lsps(double *lsps, int num,
           ^
      384.                          const uint16_t *values,
      385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:398:13: Array access: Offset: [7, 11] (⇐ 7 + [0, 4]) Size: 3 by call to `dequant_lsp16r` 
      396. 
      397.         for (m = 0; m < num; m++)
      398.             lsps[m] += base + mul * t_off[m];
                       ^
      399. 
      400.         table += sizes[n] * num;
