libavcodec/ac3dec.c:308: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: 6 by call to `ff_eac3_parse_header`.

libavcodec/ac3dec.c:264:11: Call
262.     int err;
263. 
264.     err = avpriv_ac3_parse_header(&s->gbc, &hdr);
               ^
265.     if(err)
266.         return err;

libavcodec/ac3_parser.c:38:1: Parameter `hdr->num_blocks`
  36. 
  37. 
  38. int avpriv_ac3_parse_header(GetBitContext *gbc, AC3HeaderInfo *hdr)
      ^
  39. {
  40.     int frame_size_code;

libavcodec/ac3dec.c:283:5: Assignment
281.     s->center_mix_level             = hdr.center_mix_level;
282.     s->surround_mix_level           = hdr.surround_mix_level;
283.     s->num_blocks                   = hdr.num_blocks;
         ^
284.     s->frame_type                   = hdr.frame_type;
285.     s->substreamid                  = hdr.substreamid;

libavcodec/ac3dec.c:308:16: Call
306.     } else if (CONFIG_EAC3_DECODER) {
307.         s->eac3 = 1;
308.         return ff_eac3_parse_header(s);
                    ^
309.     } else {
310.         av_log(s->avctx, AV_LOG_ERROR, "E-AC-3 support not compiled in\n");

libavcodec/eac3dec.c:291:1: <Offset trace>
289. }
290. 
291. int ff_eac3_parse_header(AC3DecodeContext *s)
     ^
292. {
293.     int i, blk, ch;

libavcodec/eac3dec.c:291:1: Parameter `s->num_blocks`
  289. }
  290. 
  291. int ff_eac3_parse_header(AC3DecodeContext *s)
       ^
  292. {
  293.     int i, blk, ch;

libavcodec/eac3dec.c:291:1: <Length trace>
289. }
290. 
291. int ff_eac3_parse_header(AC3DecodeContext *s)
     ^
292. {
293.     int i, blk, ch;

libavcodec/eac3dec.c:291:1: Parameter `s->cpl_in_use[*]`
  289. }
  290. 
  291. int ff_eac3_parse_header(AC3DecodeContext *s)
       ^
  292. {
  293.     int i, blk, ch;

libavcodec/eac3dec.c:502:38: Array access: Offset: [-1, +oo] Size: 6 by call to `ff_eac3_parse_header` 
  500.                 s->cpl_in_use[blk] = get_bits1(gbc);
  501.             } else {
  502.                 s->cpl_in_use[blk] = s->cpl_in_use[blk-1];
                                            ^
  503.             }
  504.             num_cpl_blocks += s->cpl_in_use[blk];
