libavcodec/mpegaudiodec.c:2602: error: Buffer Overrun L1
  Offset: [417, +oo] (⇐ [33, +oo] + 384) Size: 2 by call to `mp_decode_frame`.

libavcodec/mpegaudiodec.c:2567:1: Parameter `*buf`
2565. 
2566. 
2567. static int decode_frame_mp3on4(AVCodecContext * avctx,
      ^
2568.                         void *data, int *data_size,
2569.                         const uint8_t * buf, int buf_size)

libavcodec/mpegaudiodec.c:2596:9: Assignment
2594.         assert (m != NULL);
2595. 
2596.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
              ^
2597. 
2598.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavcodec/mpegaudiodec.c:2601:9: Call
2599.             break;
2600. 
2601.         ff_mpegaudio_decode_header(m, header);
              ^
2602.         out_size += mp_decode_frame(m, outptr, buf, fsize);
2603.         buf += fsize;

libavcodec/mpegaudiodecheader.c:39:9: Assignment
  37.     if (header & (1<<20)) {
  38.         s->lsf = (header & (1<<19)) ? 0 : 1;
  39.         mpeg25 = 0;
              ^
  40.     } else {
  41.         s->lsf = 1;

libavcodec/mpegaudiodecheader.c:49:5: Assignment
  47.     sample_rate_index = (header >> 10) & 3;
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
          ^
  50.     s->sample_rate_index = sample_rate_index;
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;

libavcodec/mpegaudiodecheader.c:50:5: Assignment
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
  50.     s->sample_rate_index = sample_rate_index;
          ^
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;
  52.     s->sample_rate = sample_rate;

libavcodec/mpegaudiodec.c:2602:21: Call
2600. 
2601.         ff_mpegaudio_decode_header(m, header);
2602.         out_size += mp_decode_frame(m, outptr, buf, fsize);
                          ^
2603.         buf += fsize;
2604.         len -= fsize;

libavcodec/mpegaudiodec.c:2284:1: Parameter `s->synth_buf[*]`
  2282. }
  2283. 
  2284. static int mp_decode_frame(MPADecodeContext *s,
        ^
  2285.                            OUT_INT *samples, const uint8_t *buf, int buf_size)
  2286. {

libavcodec/mpegaudiodec.c:2353:13: Call
  2351.         samples_ptr = samples + ch;
  2352.         for(i=0;i<nb_frames;i++) {
  2353.             ff_mpa_synth_filter(s->synth_buf[ch], &(s->synth_buf_offset[ch]),
                    ^
  2354.                          window, &s->dither_state,
  2355.                          samples_ptr, s->nb_channels,

libavcodec/mpegaudiodec.c:901:9: <Length trace>
899.     /* we calculate two samples at the same time to avoid one memory
900.        access per two sample */
901.     for(j=1;j<16;j++) {
             ^
902.         sum2 = 0;
903.         p = synth_buf + 16 + j;

libavcodec/mpegaudiodec.c:901:9: Assignment
    899.     /* we calculate two samples at the same time to avoid one memory
    900.        access per two sample */
    901.     for(j=1;j<16;j++) {
                 ^
    902.         sum2 = 0;
    903.         p = synth_buf + 16 + j;

libavcodec/mpegaudiodec.c:905:9: Assignment
    903.         p = synth_buf + 16 + j;
    904.         SUM8P2(sum, MACS, sum2, MLSS, w, w2, p);
    905.         p = synth_buf + 48 - j;
                 ^
    906.         SUM8P2(sum, MLSS, sum2, MLSS, w + 32, w2 + 32, p);
    907. 

libavcodec/mpegaudiodec.c:906:9: Array access: Offset: [417, +oo] (⇐ [33, +oo] + 384) Size: 2 by call to `mp_decode_frame` 
    904.         SUM8P2(sum, MACS, sum2, MLSS, w, w2, p);
    905.         p = synth_buf + 48 - j;
    906.         SUM8P2(sum, MLSS, sum2, MLSS, w + 32, w2 + 32, p);
                 ^
    907. 
    908.         *samples = round_sample(&sum);
