libavcodec/aaccoder.c:434: error: Buffer Overrun L3
  Offset: [-1, 11] Size: 12.

libavcodec/aaccoder.c:427:5: <Offset trace>
425.     //convert resulting path from backward-linked list
426.     stack_len = 0;
427.     idx       = 0;
         ^
428.     for (cb = 1; cb < 12; cb++)
429.         if (path[max_sfb][cb].cost < path[max_sfb][idx].cost)

libavcodec/aaccoder.c:427:5: Assignment
425.     //convert resulting path from backward-linked list
426.     stack_len = 0;
427.     idx       = 0;
         ^
428.     for (cb = 1; cb < 12; cb++)
429.         if (path[max_sfb][cb].cost < path[max_sfb][idx].cost)

libavcodec/aaccoder.c:433:9: Assignment
431.     ppos = max_sfb;
432.     while (ppos > 0) {
433.         cb = idx;
             ^
434.         stackrun[stack_len] = path[ppos][cb].run;
435.         stackcb [stack_len] = cb;

libavcodec/aaccoder.c:357:1: <Length trace>
355.  * Encode band info for single window group bands.
356.  */
357. static void encode_window_bands_info(AACEncContext *s, SingleChannelElement *sce,
     ^
358.                                      int win, int group_len, const float lambda)
359. {

libavcodec/aaccoder.c:357:1: Array declaration
355.  * Encode band info for single window group bands.
356.  */
357. static void encode_window_bands_info(AACEncContext *s, SingleChannelElement *sce,
     ^
358.                                      int win, int group_len, const float lambda)
359. {

libavcodec/aaccoder.c:434:31: Array access: Offset: [-1, 11] Size: 12
432.     while (ppos > 0) {
433.         cb = idx;
434.         stackrun[stack_len] = path[ppos][cb].run;
                                   ^
435.         stackcb [stack_len] = cb;
436.         idx = path[ppos-path[ppos][cb].run+1][cb].prev_idx;
