libavcodec/mpegaudiodec.c:1537: error: Buffer Overrun L1
  Offset: [48, +oo] (⇐ [0, +oo] + [48, 68]) Size: 2 by call to `compute_imdct`.

libavcodec/mpegaudiodec.c:1293:1: Parameter `s->mdct_buf[*]`
1291. 
1292. /* main layer3 decoding function */
1293. static int mp_decode_layer3(MPADecodeContext *s)
      ^
1294. {
1295.     int nb_granules, main_data_begin;

libavcodec/mpegaudiodec.c:1537:13: Call
1535.             reorder_block(s, g);
1536.             compute_antialias(s, g);
1537.             compute_imdct(s, g, &s->sb_samples[ch][18 * gr][0], s->mdct_buf[ch]);
                  ^
1538.         }
1539.     } /* gr */

libavcodec/mpegaudiodec.c:1259:14: <Offset trace>
1257.         }
1258.         imdct12(out2, ptr + 0);
1259.         for (i = 0; i < 6; i++) {
                   ^
1260.             *out_ptr     = MULH3(out2[i    ], win[i    ], 1) + buf[4*(i + 6*1)];
1261.             buf[4*(i + 6*2)] = MULH3(out2[i + 6], win[i + 6], 1);

libavcodec/mpegaudiodec.c:1259:14: Assignment
  1257.         }
  1258.         imdct12(out2, ptr + 0);
  1259.         for (i = 0; i < 6; i++) {
                     ^
  1260.             *out_ptr     = MULH3(out2[i    ], win[i    ], 1) + buf[4*(i + 6*1)];
  1261.             buf[4*(i + 6*2)] = MULH3(out2[i + 6], win[i + 6], 1);

libavcodec/mpegaudiodec.c:1213:1: <Length trace>
1211. }
1212. 
1213. static void compute_imdct(MPADecodeContext *s, GranuleDef *g,
      ^
1214.                           INTFLOAT *sb_samples, INTFLOAT *mdct_buf)
1215. {

libavcodec/mpegaudiodec.c:1213:1: Parameter `*mdct_buf`
  1211. }
  1212. 
  1213. static void compute_imdct(MPADecodeContext *s, GranuleDef *g,
        ^
  1214.                           INTFLOAT *sb_samples, INTFLOAT *mdct_buf)
  1215. {

libavcodec/mpegaudiodec.c:1246:5: Assignment
  1244.                                      g->block_type);
  1245. 
  1246.     buf = mdct_buf + 4*18*(mdct_long_end >> 2) + (mdct_long_end & 3);
            ^
  1247.     ptr = g->sb_hybrid + 18 * mdct_long_end;
  1248. 

libavcodec/mpegaudiodec.c:1261:13: Array access: Offset: [48, +oo] (⇐ [0, +oo] + [48, 68]) Size: 2 by call to `compute_imdct` 
  1259.         for (i = 0; i < 6; i++) {
  1260.             *out_ptr     = MULH3(out2[i    ], win[i    ], 1) + buf[4*(i + 6*1)];
  1261.             buf[4*(i + 6*2)] = MULH3(out2[i + 6], win[i + 6], 1);
                    ^
  1262.             out_ptr += SBLIMIT;
  1263.         }
