libavcodec/ps.c:929: error: Buffer Overrun L1
  Offset: [19, `ps->num_env` + 18] (⇐ [0, `ps->num_env` - 1] + 19) Size: 5 by call to `remap20`.

libavcodec/ps.c:878:1: Parameter `ps->num_env`
876. }
877. 
878. static void stereo_processing(PSContext *ps, float (*l)[32][2], float (*r)[32][2], int is34)
     ^
879. {
880.     int e, b, k, n;

libavcodec/ps.c:929:9: Call
927.         }
928.     } else {
929.         remap20(&iid_mapped, ps->iid_par, ps->nr_iid_par, ps->num_env, 1);
             ^
930.         remap20(&icc_mapped, ps->icc_par, ps->nr_icc_par, ps->num_env, 1);
931.         if (ps->enable_ipdopd) {

libavcodec/ps.c:859:1: Parameter `num_env`
  857. }
  858. 
  859. static void remap20(int8_t (**p_par_mapped)[PS_MAX_NR_IIDICC],
       ^
  860.                     int8_t           (*par)[PS_MAX_NR_IIDICC],
  861.                     int num_par, int num_env, int full)

libavcodec/ps.c:867:13: Call
  865.     if (num_par == 34 || num_par == 17) {
  866.         for (e = 0; e < num_env; e++) {
  867.             map_idx_34_to_20(par_mapped[e], par[e], full);
                   ^
  868.         }
  869.     } else if (num_par == 10 || num_par == 5) {

libavcodec/ps.c:559:1: <Length trace>
557. }
558. 
559. static void map_idx_34_to_20(int8_t *par_mapped, const int8_t *par, int full)
     ^
560. {
561.     par_mapped[ 0] = (2*par[ 0] +   par[ 1]) / 3;

libavcodec/ps.c:559:1: Parameter `*par_mapped`
    557. }
    558. 
    559. static void map_idx_34_to_20(int8_t *par_mapped, const int8_t *par, int full)
         ^
    560. {
    561.     par_mapped[ 0] = (2*par[ 0] +   par[ 1]) / 3;

libavcodec/ps.c:581:9: Array access: Offset: [19, ps->num_env + 18] (⇐ [0, ps->num_env - 1] + 19) Size: 5 by call to `remap20` 
    579.         par_mapped[17] = (  par[26] +   par[27]) / 2;
    580.         par_mapped[18] = (  par[28] +   par[29] +   par[30] +   par[31]) / 4;
    581.         par_mapped[19] = (  par[32] +   par[33]) / 2;
                 ^
    582.     }
    583. }
