libavcodec/wmavoice.c:1808: error: Buffer Overrun L1
  Offset: [12, 17] (⇐ 12 + [0, 5]) Size: 3 by call to `dequant_lsp16r`.

libavcodec/wmavoice.c:1750:1: Array declaration
1748.  *         fully parse the superframe
1749.  */
1750. static int synth_superframe(AVCodecContext *ctx, AVFrame *frame,
      ^
1751.                             int *got_frame_ptr)
1752. {

libavcodec/wmavoice.c:1808:13: Call
1806.             dequant_lsp10r(bc, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
1807.         } else /* s->lsps == 16 */
1808.             dequant_lsp16r(bc, lsps[2], prev_lsps, a1, a2, s->lsp_q_mode);
                  ^
1809. 
1810.         for (n = 0; n < s->lsps; n++) {

libavcodec/wmavoice.c:954:1: Parameter `*i_lsps`
  952.  * generate LSPs for the other frames from them (residual coding).
  953.  */
  954. static void dequant_lsp16r(BitstreamContext *bc,
       ^
  955.                            double *i_lsps, const double *old,
  956.                            double *a1, double *a2, int q_mode)

libavcodec/wmavoice.c:970:5: Call
  968.     int n;
  969. 
  970.     dequant_lsp16i(bc, i_lsps);
           ^
  971. 
  972.     interpol = bitstream_read(bc, 5);

libavcodec/wmavoice.c:921:1: Parameter `*lsps`
    919.  * Parse 16 independently-coded LSPs.
    920.  */
    921. static void dequant_lsp16i(BitstreamContext *bc, double *lsps)
         ^
    922. {
    923.     static const uint16_t vec_sizes[5] = { 256, 64, 128, 64, 128 };

libavcodec/wmavoice.c:946:5: Call
    944.     dequant_lsps(&lsps[5],  5, &v[2], &vec_sizes[2], 2,
    945.                  wmavoice_dq_lsp16i2, &mul_lsf[2], &base_lsf[2]);
    946.     dequant_lsps(&lsps[10], 6, &v[4], &vec_sizes[4], 1,
             ^
    947.                  wmavoice_dq_lsp16i3, &mul_lsf[4], &base_lsf[4]);
    948. }

libavcodec/wmavoice.c:827:1: <Offset trace>
825.  * @param base_q base (lowest) LSF values
826.  */
827. static void dequant_lsps(double *lsps, int num,
     ^
828.                          const uint16_t *values,
829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: Parameter `num`
      825.  * @param base_q base (lowest) LSF values
      826.  */
      827. static void dequant_lsps(double *lsps, int num,
           ^
      828.                          const uint16_t *values,
      829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: <Length trace>
825.  * @param base_q base (lowest) LSF values
826.  */
827. static void dequant_lsps(double *lsps, int num,
     ^
828.                          const uint16_t *values,
829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:827:1: Parameter `*lsps`
      825.  * @param base_q base (lowest) LSF values
      826.  */
      827. static void dequant_lsps(double *lsps, int num,
           ^
      828.                          const uint16_t *values,
      829.                          const uint16_t *sizes,

libavcodec/wmavoice.c:842:13: Array access: Offset: [12, 17] (⇐ 12 + [0, 5]) Size: 3 by call to `dequant_lsp16r` 
      840. 
      841.         for (m = 0; m < num; m++)
      842.             lsps[m] += base + mul * t_off[m];
                       ^
      843. 
      844.         table += sizes[n] * num;
