libavcodec/wmavoice.c:1352: error: Buffer Overrun L2
  Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i`.

libavcodec/wmavoice.c:1280:1: Array declaration
1278.  *         fully parse the superframe
1279.  */
1280. static int synth_superframe(AVCodecContext *ctx,
      ^
1281.                             float *samples, int *data_size)
1282. {

libavcodec/wmavoice.c:1352:17: Call
1350.                 dequant_lsp10i(gb, lsps[n]);
1351.             } else /* s->lsps == 16 */
1352.                 dequant_lsp16i(gb, lsps[n]);
                      ^
1353. 
1354.             for (m = 0; m < s->lsps; m++)

libavcodec/wmavoice.c:477:1: Parameter `*lsps`
  475.  * Parse 16 independently-coded LSPs.
  476.  */
  477. static void dequant_lsp16i(GetBitContext *gb, double *lsps)
       ^
  478. {
  479.     static const uint16_t vec_sizes[5] = { 256, 64, 128, 64, 128 };

libavcodec/wmavoice.c:498:5: Call
  496.     v[4] = get_bits(gb, 7);
  497. 
  498.     dequant_lsps( lsps,     5,  v,     vec_sizes,    2,
           ^
  499.                  wmavoice_dq_lsp16i1,  mul_lsf,     base_lsf);
  500.     dequant_lsps(&lsps[5],  5, &v[2], &vec_sizes[2], 2,

libavcodec/wmavoice.c:383:1: <Offset trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `num`
    381.  * @param base_q base (lowest) LSF values
    382.  */
    383. static void dequant_lsps(double *lsps, int num,
         ^
    384.                          const uint16_t *values,
    385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: <Length trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `*lsps`
    381.  * @param base_q base (lowest) LSF values
    382.  */
    383. static void dequant_lsps(double *lsps, int num,
         ^
    384.                          const uint16_t *values,
    385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:398:13: Array access: Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i` 
    396. 
    397.         for (m = 0; m < num; m++)
    398.             lsps[m] += base + mul * t_off[m];
                     ^
    399. 
    400.         table += sizes[n] * num;
