libavcodec/qdm2.c:1967: error: Buffer Overrun L1
  Offset: [16, +oo] Size: 4 by call to `qdm2_decode`.

libavcodec/qdm2.c:1967:13: Call
1965. 
1966.     for (i = 0; i < 16; i++) {
1967.         if (qdm2_decode(s, buf, out) < 0)
                  ^
1968.             return -1;
1969.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1911:13: Call
  1909.     if (!q->has_errors) {
  1910.         if (q->sub_packet == 2)
  1911.             qdm2_decode_fft_packets(q);
                    ^
  1912. 
  1913.         qdm2_fft_tone_synthesizer(q, q->sub_packet);

libavcodec/qdm2.c:1967:13: Call
1965. 
1966.     for (i = 0; i < 16; i++) {
1967.         if (qdm2_decode(s, buf, out) < 0)
                  ^
1968.             return -1;
1969.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1886:1: Parameter `q->fft_tones[*].duration`
  1884. 
  1885. 
  1886. static int qdm2_decode (QDM2Context *q, const uint8_t *in, int16_t *out)
        ^
  1887. {
  1888.     int ch, i;

libavcodec/qdm2.c:1913:9: Call
  1911.             qdm2_decode_fft_packets(q);
  1912. 
  1913.         qdm2_fft_tone_synthesizer(q, q->sub_packet);
                ^
  1914.     }
  1915. 

libavcodec/qdm2.c:1513:1: Parameter `q->fft_tones[*].duration`
    1511. 
    1512. 
    1513. static void qdm2_fft_tone_synthesizer (QDM2Context *q, int sub_packet)
          ^
    1514. {
    1515.     int i, j, ch;

libavcodec/qdm2.c:1545:9: Call
    1543.     /* generate existing FFT tones */
    1544.     for (i = q->fft_tone_end; i != q->fft_tone_start; ) {
    1545.         qdm2_fft_generate_tone(q, &q->fft_tones[q->fft_tone_start]);
                  ^
    1546.         q->fft_tone_start = (q->fft_tone_start + 1) % 1000;
    1547.     }

libavcodec/qdm2.c:1468:1: <Offset trace>
1466. 
1467. 
1468. static void qdm2_fft_generate_tone (QDM2Context *q, FFTTone *tone)
      ^
1469. {
1470.    float level, f[6];

libavcodec/qdm2.c:1468:1: Parameter `tone->duration`
      1466. 
      1467. 
      1468. static void qdm2_fft_generate_tone (QDM2Context *q, FFTTone *tone)
            ^
      1469. {
      1470.    float level, f[6];

libavcodec/qdm2data.h:476:1: <Length trace>
474. } };
475. 
476. static const float fft_tone_envelope_table[4][31] = {
     ^
477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2data.h:476:1: Array declaration
      474. } };
      475. 
      476. static const float fft_tone_envelope_table[4][31] = {
           ^
      477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
      478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2.c:1478:13: Array access: Offset: [16, +oo] Size: 4 by call to `qdm2_decode` 
      1476. 
      1477.     /* calculate current level (maximum amplitude) of tone */
      1478.     level = fft_tone_envelope_table[tone->duration][tone->time_index] * tone->level;
                        ^
      1479.     c.im = level * sin(tone->phase*iscale);
      1480.     c.re = level * cos(tone->phase*iscale);
