libavcodec/ac3dec.c:1387: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: 6 by call to `decode_audio_block`.

libavcodec/ac3dec.c:1386:10: Assignment
1384.         output[ch] = s->output[ch];
1385.     }
1386.     for (blk = 0; blk < s->num_blocks; blk++) {
               ^
1387.         if (!err && decode_audio_block(s, blk)) {
1388.             av_log(avctx, AV_LOG_ERROR, "error decoding the audio block\n");

libavcodec/ac3dec.c:1387:21: Call
1385.     }
1386.     for (blk = 0; blk < s->num_blocks; blk++) {
1387.         if (!err && decode_audio_block(s, blk)) {
                          ^
1388.             av_log(avctx, AV_LOG_ERROR, "error decoding the audio block\n");
1389.             err = 1;

libavcodec/ac3dec.c:719:1: <Offset trace>
717.  * Decode a single audio block from the AC-3 bitstream.
718.  */
719. static int decode_audio_block(AC3DecodeContext *s, int blk)
     ^
720. {
721.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:719:1: Parameter `blk`
  717.  * Decode a single audio block from the AC-3 bitstream.
  718.  */
  719. static int decode_audio_block(AC3DecodeContext *s, int blk)
       ^
  720. {
  721.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:719:1: <Length trace>
717.  * Decode a single audio block from the AC-3 bitstream.
718.  */
719. static int decode_audio_block(AC3DecodeContext *s, int blk)
     ^
720. {
721.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:719:1: Parameter `s->cpl_in_use[*]`
  717.  * Decode a single audio block from the AC-3 bitstream.
  718.  */
  719. static int decode_audio_block(AC3DecodeContext *s, int blk)
       ^
  720. {
  721.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:926:34: Array access: Offset: [-1, +oo] Size: 6 by call to `decode_audio_block` 
  924.             return -1;
  925.         } else {
  926.             s->cpl_in_use[blk] = s->cpl_in_use[blk-1];
                                        ^
  927.         }
  928.     }
