libavcodec/ac3dec.c:1331: error: Buffer Overrun L2
  Offset: [0, 255] Size: 7 by call to `ff_ac3dsp_downmix`.

libavcodec/ac3dec.c:977:1: Parameter `s->outptr[*]`
975.  * Decode a single audio block from the AC-3 bitstream.
976.  */
977. static int decode_audio_block(AC3DecodeContext *s, int blk)
     ^
978. {
979.     int fbw_channels = s->fbw_channels;

libavcodec/ac3dec.c:1331:13: Call
1329. 
1330.         if (downmix_output) {
1331.             ff_ac3dsp_downmix(&s->ac3dsp, s->outptr, s->downmix_coeffs,
                  ^
1332.                               s->out_channels, s->fbw_channels, 256);
1333.         }

libavcodec/ac3dsp.c:253:1: Parameter `len`
  251. }
  252. 
  253. void ff_ac3dsp_downmix(AC3DSPContext *c, float **samples, float **matrix,
       ^
  254.                        int out_ch, int in_ch, int len)
  255. {

libavcodec/ac3dsp.c:282:9: Call
  280.         c->downmix(samples, matrix, len);
  281.     else
  282.         ac3_downmix_c(samples, matrix, out_ch, in_ch, len);
               ^
  283. }
  284. 

libavcodec/ac3dsp.c:214:1: <Offset trace>
212. }
213. 
214. static void ac3_downmix_c(float **samples, float **matrix,
     ^
215.                           int out_ch, int in_ch, int len)
216. {

libavcodec/ac3dsp.c:214:1: Parameter `len`
    212. }
    213. 
    214. static void ac3_downmix_c(float **samples, float **matrix,
         ^
    215.                           int out_ch, int in_ch, int len)
    216. {

libavcodec/ac3dsp.c:214:1: <Length trace>
212. }
213. 
214. static void ac3_downmix_c(float **samples, float **matrix,
     ^
215.                           int out_ch, int in_ch, int len)
216. {

libavcodec/ac3dsp.c:214:1: Parameter `**samples`
    212. }
    213. 
    214. static void ac3_downmix_c(float **samples, float **matrix,
         ^
    215.                           int out_ch, int in_ch, int len)
    216. {

libavcodec/ac3dsp.c:227:13: Array access: Offset: [0, 255] Size: 7 by call to `ff_ac3dsp_downmix` 
    225.                 v1 += samples[j][i] * matrix[1][j];
    226.             }
    227.             samples[0][i] = v0;
                     ^
    228.             samples[1][i] = v1;
    229.         }
