libavcodec/dss_sp.c:729: error: Buffer Overrun L2
  Offset: [0, 287] Size: 72 by call to `dss_sp_update_state`.

libavcodec/dss_sp.c:699:1: Parameter `p->working_buffer[*][*]`
697. }
698. 
699. static int dss_sp_decode_one_frame(DssSpContext *p,
     ^
700.                                    int16_t *abuf_dst, const uint8_t *abuf_src)
701. {

libavcodec/dss_sp.c:729:5: Call
727.     }
728. 
729.     dss_sp_update_state(p, &p->working_buffer[0][0]);
         ^
730. 
731.     dss_sp_32to16bit(abuf_dst,

libavcodec/dss_sp.c:669:10: <Offset trace>
667.         p->excitation[i] = p->excitation[288 + i];
668. 
669.     for (i = 0; i < 72 * SUBFRAMES; i++)
              ^
670.         p->excitation[6 + i] = dst[i];
671. 

libavcodec/dss_sp.c:669:10: Assignment
  667.         p->excitation[i] = p->excitation[288 + i];
  668. 
  669.     for (i = 0; i < 72 * SUBFRAMES; i++)
                ^
  670.         p->excitation[6 + i] = dst[i];
  671. 

libavcodec/dss_sp.c:662:1: <Length trace>
660. }
661. 
662. static void dss_sp_update_state(DssSpContext *p, int32_t *dst)
     ^
663. {
664.     int i, offset = 6, counter = 0, a = 0;

libavcodec/dss_sp.c:662:1: Parameter `*dst`
  660. }
  661. 
  662. static void dss_sp_update_state(DssSpContext *p, int32_t *dst)
       ^
  663. {
  664.     int i, offset = 6, counter = 0, a = 0;

libavcodec/dss_sp.c:670:32: Array access: Offset: [0, 287] Size: 72 by call to `dss_sp_update_state` 
  668. 
  669.     for (i = 0; i < 72 * SUBFRAMES; i++)
  670.         p->excitation[6 + i] = dst[i];
                                      ^
  671. 
  672.     do {
