libavcodec/aacdec.c:2126: error: Buffer Overrun L1
  Offset: -1 Size: 7 by call to `output_configure`.

libavcodec/aacdec.c:2126:23: Call
2124.                        "Not evaluating a further program_config_element as this construct is dubious at best.\n");
2125.             else
2126.                 err = output_configure(ac, ac->che_pos, new_che_pos, 0, OC_TRIAL_PCE);
                            ^
2127.             break;
2128.         }

libavcodec/aacdec.c:213:1: <Offset trace>
211.  * @return  Returns error status. 0 - OK, !0 - error
212.  */
213. static av_cold int output_configure(AACContext *ac,
     ^
214.                                     enum ChannelPosition che_pos[4][MAX_ELEM_ID],
215.                                     enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aacdec.c:213:1: Parameter `channel_config`
  211.  * @return  Returns error status. 0 - OK, !0 - error
  212.  */
  213. static av_cold int output_configure(AACContext *ac,
       ^
  214.                                     enum ChannelPosition che_pos[4][MAX_ELEM_ID],
  215.                                     enum ChannelPosition new_che_pos[4][MAX_ELEM_ID],

libavcodec/aacdectab.h:83:1: <Length trace>
81. static const int8_t tags_per_config[16] = { 0, 1, 1, 2, 3, 3, 4, 5, 0, 0, 0, 0, 0, 0, 0, 0 };
82. 
83. static const uint8_t aac_channel_layout_map[7][5][2] = {
    ^
84.     { { TYPE_SCE, 0 }, },
85.     { { TYPE_CPE, 0 }, },

libavcodec/aacdectab.h:83:1: Array declaration
  81. static const int8_t tags_per_config[16] = { 0, 1, 1, 2, 3, 3, 4, 5, 0, 0, 0, 0, 0, 0, 0, 0 };
  82. 
  83. static const uint8_t aac_channel_layout_map[7][5][2] = {
      ^
  84.     { { TYPE_SCE, 0 }, },
  85.     { { TYPE_CPE, 0 }, },

libavcodec/aacdec.c:227:38: Array access: Offset: -1 Size: 7 by call to `output_configure` 
  225.         for (i = 0; i < tags_per_config[channel_config]; i++) {
  226.             if ((ret = che_configure(ac, che_pos,
  227.                                      aac_channel_layout_map[channel_config - 1][i][0],
                                            ^
  228.                                      aac_channel_layout_map[channel_config - 1][i][1],
  229.                                      &channels)))
