libavcodec/wmavoice.c:1331: error: Buffer Overrun L2
  Offset: [2, 11] (⇐ 2 + [0, 9]) Size: 3 by call to `dequant_lsp10r`.

libavcodec/wmavoice.c:1280:1: Array declaration
1278.  *         fully parse the superframe
1279.  */
1280. static int synth_superframe(AVCodecContext *ctx,
      ^
1281.                             float *samples, int *data_size)
1282. {

libavcodec/wmavoice.c:1331:13: Call
1329. 
1330.         if (s->lsps == 10) {
1331.             dequant_lsp10r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
                  ^
1332.         } else /* s->lsps == 16 */
1333.             dequant_lsp16r(gb, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);

libavcodec/wmavoice.c:441:1: Parameter `*i_lsps`
  439.  * generate LSPs for the other frames from them (residual coding).
  440.  */
  441. static void dequant_lsp10r(GetBitContext *gb,
       ^
  442.                            double *i_lsps, const double *old,
  443.                            double *a1, double *a2, int q_mode)

libavcodec/wmavoice.c:457:5: Call
  455.     int n;
  456. 
  457.     dequant_lsp10i(gb, i_lsps);
           ^
  458. 
  459.     interpol = get_bits(gb, 5);

libavcodec/wmavoice.c:415:1: Parameter `*lsps`
    413.  * Parse 10 independently-coded LSPs.
    414.  */
    415. static void dequant_lsp10i(GetBitContext *gb, double *lsps)
         ^
    416. {
    417.     static const uint16_t vec_sizes[4] = { 256, 64, 32, 32 };

libavcodec/wmavoice.c:433:5: Call
    431.     v[3] = get_bits(gb, 5);
    432. 
    433.     dequant_lsps(lsps, 10, v, vec_sizes, 4, wmavoice_dq_lsp10i,
             ^
    434.                  mul_lsf, base_lsf);
    435. }

libavcodec/wmavoice.c:383:1: <Offset trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `num`
      381.  * @param base_q base (lowest) LSF values
      382.  */
      383. static void dequant_lsps(double *lsps, int num,
           ^
      384.                          const uint16_t *values,
      385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: <Length trace>
381.  * @param base_q base (lowest) LSF values
382.  */
383. static void dequant_lsps(double *lsps, int num,
     ^
384.                          const uint16_t *values,
385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:383:1: Parameter `*lsps`
      381.  * @param base_q base (lowest) LSF values
      382.  */
      383. static void dequant_lsps(double *lsps, int num,
           ^
      384.                          const uint16_t *values,
      385.                          const uint16_t *sizes,

libavcodec/wmavoice.c:398:13: Array access: Offset: [2, 11] (⇐ 2 + [0, 9]) Size: 3 by call to `dequant_lsp10r` 
      396. 
      397.         for (m = 0; m < num; m++)
      398.             lsps[m] += base + mul * t_off[m];
                       ^
      399. 
      400.         table += sizes[n] * num;
