libavcodec/ac3dec.c:1140: error: Buffer Overrun L1
  Offset added: [256, `s->channels` + 256] (⇐ [0, `s->channels`] + 256) Size: 56 by call to `ff_ac3_bit_alloc_calc_bap`.

libavcodec/ac3dec.c:777:1: Parameter `s->bap[*]`
775.  * Decode a single audio block from the AC-3 bitstream.
776.  */
777. static int decode_audio_block(AC3DecodeContext *s, int blk)
     ^
778. {
779.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:1140:13: Call
1138.             const uint8_t *bap_tab = s->channel_uses_aht[ch] ?
1139.                                      ff_eac3_hebap_tab : ff_ac3_bap_tab;
1140.             ff_ac3_bit_alloc_calc_bap(s->mask[ch], s->psd[ch],
                  ^
1141.                                       s->start_freq[ch], s->end_freq[ch],
1142.                                       s->snr_offset[ch],

libavcodec/ac3.c:215:1: <Length trace>
213. }
214. 
215. void ff_ac3_bit_alloc_calc_bap(int16_t *mask, int16_t *psd, int start, int end,
     ^
216.                                int snr_offset, int floor,
217.                                const uint8_t *bap_tab, uint8_t *bap)

libavcodec/ac3.c:215:1: Parameter `*bap`
  213. }
  214. 
  215. void ff_ac3_bit_alloc_calc_bap(int16_t *mask, int16_t *psd, int start, int end,
       ^
  216.                                int snr_offset, int floor,
  217.                                const uint8_t *bap_tab, uint8_t *bap)

libavcodec/ac3.c:223:9: Array access: Offset added: [256, s->channels + 256] (⇐ [0, s->channels] + 256) Size: 56 by call to `ff_ac3_bit_alloc_calc_bap` 
  221.     /* special case, if snr offset is -960, set all bap's to zero */
  222.     if (snr_offset == -960) {
  223.         memset(bap, 0, 256);
               ^
  224.         return;
  225.     }
