libavcodec/aacps.c:765: error: Buffer Overrun L1
  Offset: [33, `ps->num_env` + 32] (⇐ [0, `ps->num_env` - 1] + 33) Size: 5 by call to `remap34`.

libavcodec/aacps.c:731:1: Parameter `ps->num_env`
729. }
730. 
731. static void stereo_processing(PSContext *ps, float (*l)[32][2], float (*r)[32][2], int is34)
     ^
732. {
733.     int e, b, k;

libavcodec/aacps.c:765:9: Call
763. 
764.     if (is34) {
765.         remap34(&iid_mapped, ps->iid_par, ps->nr_iid_par, ps->num_env, 1);
             ^
766.         remap34(&icc_mapped, ps->icc_par, ps->nr_icc_par, ps->num_env, 1);
767.         if (ps->enable_ipdopd) {

libavcodec/aacps.c:693:1: Parameter `num_env`
  691. }
  692. 
  693. static void remap34(int8_t (**p_par_mapped)[PS_MAX_NR_IIDICC],
       ^
  694.                     int8_t           (*par)[PS_MAX_NR_IIDICC],
  695.                     int num_par, int num_env, int full)

libavcodec/aacps.c:701:13: Call
  699.     if (num_par == 20 || num_par == 11) {
  700.         for (e = 0; e < num_env; e++) {
  701.             map_idx_20_to_34(par_mapped[e], par[e], full);
                   ^
  702.         }
  703.     } else if (num_par == 10 || num_par == 5) {

libavcodec/aacps.c:531:1: <Length trace>
529. }
530. 
531. static void map_idx_20_to_34(int8_t *par_mapped, const int8_t *par, int full)
     ^
532. {
533.     if (full) {

libavcodec/aacps.c:531:1: Parameter `*par_mapped`
    529. }
    530. 
    531. static void map_idx_20_to_34(int8_t *par_mapped, const int8_t *par, int full)
         ^
    532. {
    533.     if (full) {

libavcodec/aacps.c:534:9: Array access: Offset: [33, ps->num_env + 32] (⇐ [0, ps->num_env - 1] + 33) Size: 5 by call to `remap34` 
    532. {
    533.     if (full) {
    534.         par_mapped[33] =  par[19];
                 ^
    535.         par_mapped[32] =  par[19];
    536.         par_mapped[31] =  par[18];
