libavcodec/mpegaudiodec.c:2495: error: Buffer Overrun L2
  Offset: [0, 9] Size: 9 by call to `mp_decode_frame`.

libavcodec/mpegaudiodec.c:2460:1: Parameter `*buf`
2458. 
2459. 
2460. static int decode_frame_mp3on4(AVCodecContext * avctx,
      ^
2461.                         void *data, int *data_size,
2462.                         const uint8_t * buf, int buf_size)

libavcodec/mpegaudiodec.c:2489:9: Assignment
2487.         assert (m != NULL);
2488. 
2489.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
              ^
2490. 
2491.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavcodec/mpegaudiodec.c:2494:9: Call
2492.             break;
2493. 
2494.         ff_mpegaudio_decode_header((MPADecodeHeader *)m, header);
              ^
2495.         out_size += mp_decode_frame(m, outptr, buf, fsize);
2496.         buf += fsize;

libavcodec/mpegaudiodecheader.c:39:9: Assignment
  37.     if (header & (1<<20)) {
  38.         s->lsf = (header & (1<<19)) ? 0 : 1;
  39.         mpeg25 = 0;
              ^
  40.     } else {
  41.         s->lsf = 1;

libavcodec/mpegaudiodecheader.c:49:5: Assignment
  47.     sample_rate_index = (header >> 10) & 3;
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
          ^
  50.     s->sample_rate_index = sample_rate_index;
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;

libavcodec/mpegaudiodecheader.c:50:5: Assignment
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
  50.     s->sample_rate_index = sample_rate_index;
          ^
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;
  52.     s->sample_rate = sample_rate;

libavcodec/mpegaudiodec.c:2495:21: Call
2493. 
2494.         ff_mpegaudio_decode_header((MPADecodeHeader *)m, header);
2495.         out_size += mp_decode_frame(m, outptr, buf, fsize);
                          ^
2496.         buf += fsize;
2497.         len -= fsize;

libavcodec/mpegaudiodec.c:2188:1: Parameter `s->sample_rate_index`
  2186. }
  2187. 
  2188. static int mp_decode_frame(MPADecodeContext *s,
        ^
  2189.                            OUT_INT *samples, const uint8_t *buf, int buf_size)
  2190. {

libavcodec/mpegaudiodec.c:2213:21: Call
  2211.         s->avctx->frame_size = s->lsf ? 576 : 1152;
  2212.     default:
  2213.         nb_frames = mp_decode_layer3(s);
                            ^
  2214. 
  2215.         s->last_buf_size=0;

libavcodec/mpegaudiodec.c:1944:1: Parameter `s->sample_rate_index`
    1942. 
    1943. /* main layer3 decoding function */
    1944. static int mp_decode_layer3(MPADecodeContext *s)
          ^
    1945. {
    1946.     int nb_granules, main_data_begin, private_bits;

libavcodec/mpegaudiodec.c:2166:13: Call
    2164.             }
    2165. 
    2166.             exponents_from_scale_factors(s, g, exponents);
                      ^
    2167. 
    2168.             /* read Huffman coded residue */

libavcodec/mpegaudiodec.c:1391:1: <Offset trace>
1389. }
1390. 
1391. static void exponents_from_scale_factors(MPADecodeContext *s,
      ^
1392.                                          GranuleDef *g,
1393.                                          int16_t *exponents)

libavcodec/mpegaudiodec.c:1391:1: Parameter `s->sample_rate_index`
      1389. }
      1390. 
      1391. static void exponents_from_scale_factors(MPADecodeContext *s,
            ^
      1392.                                          GranuleDef *g,
      1393.                                          int16_t *exponents)

libavcodec/mpegaudiodectab.h:563:1: <Length trace>
561. 
562. /* band size tables */
563. static const uint8_t band_size_long[9][22] = {
     ^
564. { 4, 4, 4, 4, 4, 4, 6, 6, 8, 8, 10,
565.   12, 16, 20, 24, 28, 34, 42, 50, 54, 76, 158, }, /* 44100 */

libavcodec/mpegaudiodectab.h:563:1: Array declaration
      561. 
      562. /* band size tables */
      563. static const uint8_t band_size_long[9][22] = {
           ^
      564. { 4, 4, 4, 4, 4, 4, 6, 6, 8, 8, 10,
      565.   12, 16, 20, 24, 28, 34, 42, 50, 54, 76, 158, }, /* 44100 */

libavcodec/mpegaudiodec.c:1403:5: Array access: Offset: [0, 9] Size: 9 by call to `mp_decode_frame` 
      1401.     shift = g->scalefac_scale + 1;
      1402. 
      1403.     bstab = band_size_long[s->sample_rate_index];
                ^
      1404.     pretab = mpa_pretab[g->preflag];
      1405.     for(i=0;i<g->long_end;i++) {
