libavcodec/cook.c:1024: error: Buffer Overrun L1
  Offset: [-oo, -1] Size: 256 by call to `decode_subpacket`.

libavcodec/cook.c:986:5: Assignment
984.     int i, ret;
985.     int offset = 0;
986.     int chidx = 0;
         ^
987. 
988.     if (buf_size < avctx->block_align)

libavcodec/cook.c:1018:9: Assignment
1016.         q->subpacket[i].bits_per_subpacket = (q->subpacket[i].size * 8) >>
1017.                                               q->subpacket[i].bits_per_subpdiv;
1018.         q->subpacket[i].ch_idx = chidx;
              ^
1019.         av_log(avctx, AV_LOG_DEBUG,
1020.                "subpacket[%i] size %i js %i %i block_align %i\n",

libavcodec/cook.c:1024:20: Call
1022.                avctx->block_align);
1023. 
1024.         if ((ret = decode_subpacket(q, &q->subpacket[i], buf + offset, samples)) < 0)
                         ^
1025.             return ret;
1026.         offset += q->subpacket[i].size;

libavcodec/cook.c:931:1: Parameter `p->numvector_size`
  929.  * @param outbuffer         pointer to the outbuffer
  930.  */
  931. static int decode_subpacket(COOKContext *q, COOKSubpacket *p,
       ^
  932.                             const uint8_t *inbuffer, float *outbuffer)
  933. {

libavcodec/cook.c:947:20: Call
  945.             return res;
  946.     } else {
  947.         if ((res = mono_decode(q, p, q->decode_buffer_1)) < 0)
                          ^
  948.             return res;
  949. 

libavcodec/cook.c:650:1: Parameter `p->numvector_size`
    648.  * @param mlt_buffer        pointer to mlt coefficients
    649.  */
    650. static int mono_decode(COOKContext *q, COOKSubpacket *p, float *mlt_buffer)
         ^
    651. {
    652.     int category_index[128];

libavcodec/cook.c:663:5: Call
    661.         return res;
    662.     q->num_vectors = get_bits(&q->gb, p->log2_numvector_size);
    663.     categorize(q, p, quant_index_table, category, category_index);
             ^
    664.     expand_category(q, category, category_index);
    665.     decode_vectors(q, p, category, quant_index_table, mlt_buffer);

libavcodec/cook.c:410:1: <Offset trace>
408.  * @param category_index        pointer to the category_index array
409.  */
410. static void categorize(COOKContext *q, COOKSubpacket *p, int *quant_index_table,
     ^
411.                        int *category, int *category_index)
412. {

libavcodec/cook.c:410:1: Parameter `p->numvector_size`
      408.  * @param category_index        pointer to the category_index array
      409.  */
      410. static void categorize(COOKContext *q, COOKSubpacket *p, int *quant_index_table,
           ^
      411.                        int *category, int *category_index)
      412. {

libavcodec/cook.c:419:5: Assignment
      417.     int tmp_categorize_array[128 * 2];
      418.     int tmp_categorize_array1_idx = p->numvector_size;
      419.     int tmp_categorize_array2_idx = p->numvector_size;
               ^
      420. 
      421.     bits_left = p->bits_per_subpacket - get_bits_count(&q->gb);

libavcodec/cook.c:410:1: <Length trace>
408.  * @param category_index        pointer to the category_index array
409.  */
410. static void categorize(COOKContext *q, COOKSubpacket *p, int *quant_index_table,
     ^
411.                        int *category, int *category_index)
412. {

libavcodec/cook.c:410:1: Array declaration
      408.  * @param category_index        pointer to the category_index array
      409.  */
      410. static void categorize(COOKContext *q, COOKSubpacket *p, int *quant_index_table,
           ^
      411.                        int *category, int *category_index)
      412. {

libavcodec/cook.c:491:13: Array access: Offset: [-oo, -1] Size: 256 by call to `decode_subpacket` 
      489.             if (index == -1)
      490.                 break;
      491.             tmp_categorize_array[--tmp_categorize_array2_idx] = index;
                       ^
      492.             tmpbias2 -= expbits_tab[exp_index2[index]] -
      493.                         expbits_tab[exp_index2[index] - 1];
