libavcodec/qdm2.c:1993: error: Buffer Overrun L1
  Offset: [16, +oo] Size: 4 by call to `qdm2_decode`.

libavcodec/qdm2.c:1986:16: Call
1984.     /* get output buffer */
1985.     frame->nb_samples = 16 * s->frame_size;
1986.     if ((ret = ff_get_buffer(avctx, frame, 0)) < 0) {
                     ^
1987.         av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n");
1988.         return ret;

libavcodec/utils.c:606:1: Parameter `*frame->buf[*]`
  604. }
  605. 
  606. int ff_get_buffer(AVCodecContext *avctx, AVFrame *frame, int flags)
       ^
  607. {
  608.     const AVHWAccel *hwaccel = avctx->hwaccel;

libavcodec/qdm2.c:1993:20: Call
1991. 
1992.     for (i = 0; i < 16; i++) {
1993.         if ((ret = qdm2_decode(s, buf, out)) < 0)
                         ^
1994.             return ret;
1995.         out += s->channels * s->frame_size;

libavcodec/qdm2.c:1910:1: Parameter `q->fft_tones[*].duration`
  1908. }
  1909. 
  1910. static int qdm2_decode(QDM2Context *q, const uint8_t *in, int16_t *out)
        ^
  1911. {
  1912.     int ch, i;

libavcodec/qdm2.c:1935:9: Call
  1933.             qdm2_decode_fft_packets(q);
  1934. 
  1935.         qdm2_fft_tone_synthesizer(q, q->sub_packet);
                ^
  1936.     }
  1937. 

libavcodec/qdm2.c:1582:1: Parameter `q->fft_tones[*].duration`
    1580. }
    1581. 
    1582. static void qdm2_fft_tone_synthesizer(QDM2Context *q, int sub_packet)
          ^
    1583. {
    1584.     int i, j, ch;

libavcodec/qdm2.c:1614:9: Call
    1612.     /* generate existing FFT tones */
    1613.     for (i = q->fft_tone_end; i != q->fft_tone_start; ) {
    1614.         qdm2_fft_generate_tone(q, &q->fft_tones[q->fft_tone_start]);
                  ^
    1615.         q->fft_tone_start = (q->fft_tone_start + 1) % 1000;
    1616.     }

libavcodec/qdm2.c:1536:1: <Offset trace>
1534. }
1535. 
1536. static void qdm2_fft_generate_tone(QDM2Context *q, FFTTone *tone)
      ^
1537. {
1538.     float level, f[6];

libavcodec/qdm2.c:1536:1: Parameter `tone->duration`
      1534. }
      1535. 
      1536. static void qdm2_fft_generate_tone(QDM2Context *q, FFTTone *tone)
            ^
      1537. {
      1538.     float level, f[6];

libavcodec/qdm2data.h:476:1: <Length trace>
474. } };
475. 
476. static const float fft_tone_envelope_table[4][31] = {
     ^
477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2data.h:476:1: Array declaration
      474. } };
      475. 
      476. static const float fft_tone_envelope_table[4][31] = {
           ^
      477.     { .009607375f, .038060248f, .084265202f, .146446645f, .222214907f, .308658302f,
      478.       .402454883f, .500000060f, .597545207f, .691341758f, .777785182f, .853553414f,

libavcodec/qdm2.c:1546:13: Array access: Offset: [16, +oo] Size: 4 by call to `qdm2_decode` 
      1544. 
      1545.     /* calculate current level (maximum amplitude) of tone */
      1546.     level = fft_tone_envelope_table[tone->duration][tone->time_index] * tone->level;
                        ^
      1547.     c.im  = level * sin(tone->phase * iscale);
      1548.     c.re  = level * cos(tone->phase * iscale);
