libavcodec/qcelpdec.c:227: error: Buffer Overrun L3
  Offset: [-2, 13] Size: 16.

libavcodec/qcelpdec.c:220:29: <Offset trace>
218.     if (q->bitrate >= RATE_QUARTER) {
219.         switch (q->bitrate) {
220.             case RATE_FULL: subframes_count = 16; break;
                                 ^
221.             case RATE_HALF: subframes_count = 4;  break;
222.             default:        subframes_count = 5;

libavcodec/qcelpdec.c:220:29: Assignment
218.     if (q->bitrate >= RATE_QUARTER) {
219.         switch (q->bitrate) {
220.             case RATE_FULL: subframes_count = 16; break;
                                 ^
221.             case RATE_HALF: subframes_count = 4;  break;
222.             default:        subframes_count = 5;

libavcodec/qcelpdec.c:213:1: <Length trace>
211.  * TIA/EIA/IS-733 2.4.6.2
212.  */
213. static void decode_gain_and_index(QCELPContext  *q,
     ^
214.                                   float *gain) {
215.     int   i, subframes_count, g1[16];

libavcodec/qcelpdec.c:213:1: Array declaration
211.  * TIA/EIA/IS-733 2.4.6.2
212.  */
213. static void decode_gain_and_index(QCELPContext  *q,
     ^
214.                                   float *gain) {
215.     int   i, subframes_count, g1[16];

libavcodec/qcelpdec.c:227:45: Array access: Offset: [-2, 13] Size: 16
225.             g1[i] = 4 * q->frame.cbgain[i];
226.             if (q->bitrate == RATE_FULL && !((i+1) & 3)) {
227.                 g1[i] += av_clip((g1[i-1] + g1[i-2] + g1[i-3]) / 3 - 6, 0, 32);
                                                 ^
228.             }
229. 
