libavcodec/wmavoice.c:1836: error: Buffer Overrun L2
  Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i`.

libavcodec/wmavoice.c:1750:1: Array declaration
1748.  *         fully parse the superframe
1749.  */
1750. static int synth_superframe(AVCodecContext *ctx, AVFrame *frame,
      ^
1751.                             int *got_frame_ptr)
1752. {

libavcodec/wmavoice.c:1836:17: Call
1834.                 dequant_lsp10i(bc, lsps[n]);
1835.             } else /* s->lsps == 16 */
1836.                 dequant_lsp16i(bc, lsps[n]);
                      ^
1837. 
1838.             for (m = 0; m < s->lsps; m++)

libavcodec/wmavoice.c:921:1: Parameter `*lsps`
  919.  * Parse 16 independently-coded LSPs.
  920.  */
  921. static void dequant_lsp16i(BitstreamContext *bc, double *lsps)
       ^
  922. {
  923.     static const uint16_t vec_sizes[5] = { 256, 64, 128, 64, 128 };

libavcodec/wmavoice.c:942:5: Call
  940.     v[4] = bitstream_read(bc, 7);
  941. 
  942.     dequant_lsps( lsps,     5,  v,     vec_sizes,    2,
           ^
  943.                  wmavoice_dq_lsp16i1,  mul_lsf,     base_lsf);
  944.     dequant_lsps(&lsps[5],  5, &v[2], &vec_sizes[2], 2,

libavcodec/wmavoice.c:827:1: <Offset trace>
825.  * @param base_q base (lowest) LSF values
826.  */
827. static void dequant_lsps(double *lsps, int num,
     ^
828.                          const uint16_t *values,
829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: Parameter `num`
    825.  * @param base_q base (lowest) LSF values
    826.  */
    827. static void dequant_lsps(double *lsps, int num,
         ^
    828.                          const uint16_t *values,
    829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: <Length trace>
825.  * @param base_q base (lowest) LSF values
826.  */
827. static void dequant_lsps(double *lsps, int num,
     ^
828.                          const uint16_t *values,
829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: Parameter `*lsps`
    825.  * @param base_q base (lowest) LSF values
    826.  */
    827. static void dequant_lsps(double *lsps, int num,
         ^
    828.                          const uint16_t *values,
    829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:842:13: Array access: Offset: [0, 6] (⇐ [0, 2] + [0, 4]) Size: 3 by call to `dequant_lsp16i` 
    840. 
    841.         for (m = 0; m < num; m++)
    842.             lsps[m] += base + mul * t_off[m];
                     ^
    843. 
    844.         table += sizes[n] * num;
