libavcodec/aacenc.c:254: error: Buffer Overrun L3
  Offset: [-1023, 1278] Size: 2048.

libavcodec/aacenc.c:252:14: <Offset trace>
250.         ff_mdct_calc(&s->mdct1024, sce->coeffs, s->output);
251.     } else {
252.         for (k = 0; k < 1024; k += 128) {
                  ^
253.             for (i = 448 + k; i < 448 + k + 256; i++)
254.                 s->output[i - 448 - k] = (i < 1024)

libavcodec/aacenc.c:252:14: Assignment
250.         ff_mdct_calc(&s->mdct1024, sce->coeffs, s->output);
251.     } else {
252.         for (k = 0; k < 1024; k += 128) {
                  ^
253.             for (i = 448 + k; i < 448 + k + 256; i++)
254.                 s->output[i - 448 - k] = (i < 1024)

libavcodec/aacenc.c:219:1: <Length trace>
217. }
218. 
219. static void apply_window_and_mdct(AVCodecContext *avctx, AACEncContext *s,
     ^
220.                                   SingleChannelElement *sce, short *audio, int channel)
221. {

libavcodec/aacenc.c:219:1: Parameter `s->output[*]`
217. }
218. 
219. static void apply_window_and_mdct(AVCodecContext *avctx, AACEncContext *s,
     ^
220.                                   SingleChannelElement *sce, short *audio, int channel)
221. {

libavcodec/aacenc.c:254:17: Array access: Offset: [-1023, 1278] Size: 2048
252.         for (k = 0; k < 1024; k += 128) {
253.             for (i = 448 + k; i < 448 + k + 256; i++)
254.                 s->output[i - 448 - k] = (i < 1024)
                     ^
255.                                          ? sce->saved[i]
256.                                          : audio[channel + (i-1024)*avctx->channels];
