libavcodec/amrnbdec.c:889: error: Buffer Overrun L3
  Offset: [-2, +oo] (⇐ [10, +oo] + [-12, -7]) Size: 32 by call to `ff_celp_lp_synthesis_filterf`.

libavcodec/amrnbdec.c:879:1: Array declaration
877.  * @param lpc_d LP_FILTER_ORDER coefficients of the denominator
878.  */
879. static float tilt_factor(float *lpc_n, float *lpc_d)
     ^
880. {
881.     float rh0, rh1; // autocorrelation at lag 0 and 1

libavcodec/amrnbdec.c:885:5: Assignment
883.     // LP_FILTER_ORDER prior zeros are needed for ff_celp_lp_synthesis_filterf
884.     float impulse_buffer[LP_FILTER_ORDER + AMR_TILT_RESPONSE] = { 0 };
885.     float *hf = impulse_buffer + LP_FILTER_ORDER; // start of impulse response
         ^
886. 
887.     hf[0] = 1.0;

libavcodec/amrnbdec.c:889:5: Call
887.     hf[0] = 1.0;
888.     memcpy(hf + 1, lpc_n, sizeof(float) * LP_FILTER_ORDER);
889.     ff_celp_lp_synthesis_filterf(hf, lpc_d, hf, AMR_TILT_RESPONSE,
         ^
890.                                  LP_FILTER_ORDER);
891. 

libavcodec/celp_filters.c:83:1: <Offset trace>
81. }
82. 
83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
    ^
84.                                   const float* in, int buffer_length,
85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: Parameter `filter_length`
  81. }
  82. 
  83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
      ^
  84.                                   const float* in, int buffer_length,
  85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: <Length trace>
81. }
82. 
83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
    ^
84.                                   const float* in, int buffer_length,
85.                                   int filter_length)

libavcodec/celp_filters.c:83:1: Parameter `*out`
  81. }
  82. 
  83. void ff_celp_lp_synthesis_filterf(float *out, const float *filter_coeffs,
      ^
  84.                                   const float* in, int buffer_length,
  85.                                   int filter_length)

libavcodec/celp_filters.c:150:24: Array access: Offset: [-2, +oo] (⇐ [10, +oo] + [-12, -7]) Size: 32 by call to `ff_celp_lp_synthesis_filterf` 
  148.             FFSWAP(float, old_out0, old_out2);
  149.             old_out1 = old_out3;
  150.             old_out3 = out[-i-2];
                              ^
  151.         }
  152. 
