libavcodec/twinvq.c:1067: error: Buffer Overrun L2
  Offset: [0, 3] Size: 3 by call to `construct_perm_table`.

libavcodec/twinvq.c:1066:10: Assignment
1064.     }
1065. 
1066.     for (i=0; i < 4; i++)
               ^
1067.         construct_perm_table(tctx, i);
1068. }

libavcodec/twinvq.c:1067:9: Call
1065. 
1066.     for (i=0; i < 4; i++)
1067.         construct_perm_table(tctx, i);
              ^
1068. }
1069. 

libavcodec/twinvq.c:978:1: <Offset trace>
976. }
977. 
978. static av_cold void construct_perm_table(TwinContext *tctx,enum FrameType ftype)
     ^
979. {
980.     int block_size;

libavcodec/twinvq.c:978:1: Parameter `ftype`
  976. }
  977. 
  978. static av_cold void construct_perm_table(TwinContext *tctx,enum FrameType ftype)
       ^
  979. {
  980.     int block_size;

libavcodec/twinvq.c:978:1: <Length trace>
976. }
977. 
978. static av_cold void construct_perm_table(TwinContext *tctx,enum FrameType ftype)
     ^
979. {
980.     int block_size;

libavcodec/twinvq.c:978:1: Parameter `tctx->mtab->fmode[*]`
  976. }
  977. 
  978. static av_cold void construct_perm_table(TwinContext *tctx,enum FrameType ftype)
       ^
  979. {
  980.     int block_size;

libavcodec/twinvq.c:982:38: Array access: Offset: [0, 3] Size: 3 by call to `construct_perm_table` 
  980.     int block_size;
  981.     const ModeTab *mtab = tctx->mtab;
  982.     int size = tctx->avctx->channels*mtab->fmode[ftype].sub;
                                            ^
  983.     int16_t *tmp_perm = (int16_t *) tctx->tmp_buf;
  984. 
