libavcodec/aaccoder.c:167: error: Buffer Overrun L3
  Offset: [-2, 3] Size: 4.

libavcodec/aaccoder.c:132:10: <Offset trace>
130. #ifndef USE_REALLY_FULL_SEARCH
131.     offs[0] = 1;
132.     for (i = 1; i < dim; i++)
              ^
133.         offs[i] = offs[i-1]*range;
134.     if (!scaled) {

libavcodec/aaccoder.c:132:10: Assignment
130. #ifndef USE_REALLY_FULL_SEARCH
131.     offs[0] = 1;
132.     for (i = 1; i < dim; i++)
              ^
133.         offs[i] = offs[i-1]*range;
134.     if (!scaled) {

libavcodec/aaccoder.c:103:1: <Length trace>
101.  * @return quantization distortion
102.  */
103. static float quantize_and_encode_band_cost(struct AACEncContext *s,
     ^
104.                                 PutBitContext *pb, const float *in,
105.                                 const float *scaled, int size, int scale_idx,

libavcodec/aaccoder.c:103:1: Array declaration
101.  * @return quantization distortion
102.  */
103. static float quantize_and_encode_band_cost(struct AACEncContext *s,
     ^
104.                                 PutBitContext *pb, const float *in,
105.                                 const float *scaled, int size, int scale_idx,

libavcodec/aaccoder.c:167:57: Array access: Offset: [-2, 3] Size: 4
165.                 continue;
166.             for (k = 0; k < dim; k++)
167.                 curidx += quants[k][!!(j & (1 << k))] * offs[dim - 1 - k];
                                                             ^
168.             curbits =  ff_aac_spectral_bits[cb-1][curidx];
169.             vec     = &ff_aac_codebook_vectors[cb-1][curidx*dim];
