libavcodec/twinvq.c:1089: error: Buffer Overrun L2
  Offset: [0, 3] Size: 3 by call to `construct_perm_table`.

libavcodec/twinvq.c:1088:10: Assignment
1086.     }
1087. 
1088.     for (frametype = FT_SHORT; frametype <= FT_PPC; frametype++)
               ^
1089.         construct_perm_table(tctx, frametype);
1090. }

libavcodec/twinvq.c:1089:9: Call
1087. 
1088.     for (frametype = FT_SHORT; frametype <= FT_PPC; frametype++)
1089.         construct_perm_table(tctx, frametype);
              ^
1090. }
1091. 

libavcodec/twinvq.c:997:1: <Offset trace>
995. }
996. 
997. static av_cold void construct_perm_table(TwinVQContext *tctx,
     ^
998.                                          enum TwinVQFrameType ftype)
999. {

libavcodec/twinvq.c:997:1: Parameter `ftype`
  995. }
  996. 
  997. static av_cold void construct_perm_table(TwinVQContext *tctx,
       ^
  998.                                          enum TwinVQFrameType ftype)
  999. {

libavcodec/twinvq.c:997:1: <Length trace>
995. }
996. 
997. static av_cold void construct_perm_table(TwinVQContext *tctx,
     ^
998.                                          enum TwinVQFrameType ftype)
999. {

libavcodec/twinvq.c:997:1: Parameter `tctx->mtab->fmode[*]`
  995. }
  996. 
  997. static av_cold void construct_perm_table(TwinVQContext *tctx,
       ^
  998.                                          enum TwinVQFrameType ftype)
  999. {

libavcodec/twinvq.c:1008:46: Array access: Offset: [0, 3] Size: 3 by call to `construct_perm_table` 
  1006.         block_size = mtab->ppc_shape_len;
  1007.     } else {
  1008.         size       = tctx->avctx->channels * mtab->fmode[ftype].sub;
                                                     ^
  1009.         block_size = mtab->size / mtab->fmode[ftype].sub;
  1010.     }
