libavcodec/ac3dec.c:324: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: 6 by call to `ff_eac3_parse_header`.

libavcodec/ac3dec.c:273:11: Call
271.     int err;
272. 
273.     err = ff_ac3_parse_header(&s->gbc, &hdr);
               ^
274.     if (err)
275.         return err;

libavcodec/ac3_parser.c:54:1: Parameter `hdr->num_blocks`
  52. 
  53. 
  54. int ff_ac3_parse_header(GetBitContext *gbc, AC3HeaderInfo *hdr)
      ^
  55. {
  56.     int frame_size_code;

libavcodec/ac3dec.c:296:5: Assignment
294.     s->surround_mix_level_ltrt      = 4; // -3.0dB
295.     s->lfe_mix_level_exists         = 0;
296.     s->num_blocks                   = hdr.num_blocks;
         ^
297.     s->frame_type                   = hdr.frame_type;
298.     s->substreamid                  = hdr.substreamid;

libavcodec/ac3dec.c:324:16: Call
322.     } else if (CONFIG_EAC3_DECODER) {
323.         s->eac3 = 1;
324.         return ff_eac3_parse_header(s);
                    ^
325.     } else {
326.         av_log(s->avctx, AV_LOG_ERROR, "E-AC-3 support not compiled in\n");

libavcodec/eac3dec.c:290:1: <Offset trace>
288. }
289. 
290. int ff_eac3_parse_header(AC3DecodeContext *s)
     ^
291. {
292.     int i, blk, ch;

libavcodec/eac3dec.c:290:1: Parameter `s->num_blocks`
  288. }
  289. 
  290. int ff_eac3_parse_header(AC3DecodeContext *s)
       ^
  291. {
  292.     int i, blk, ch;

libavcodec/eac3dec.c:290:1: <Length trace>
288. }
289. 
290. int ff_eac3_parse_header(AC3DecodeContext *s)
     ^
291. {
292.     int i, blk, ch;

libavcodec/eac3dec.c:290:1: Parameter `s->cpl_in_use[*]`
  288. }
  289. 
  290. int ff_eac3_parse_header(AC3DecodeContext *s)
       ^
  291. {
  292.     int i, blk, ch;

libavcodec/eac3dec.c:507:38: Array access: Offset: [-1, +oo] Size: 6 by call to `ff_eac3_parse_header` 
  505.                 s->cpl_in_use[blk] = get_bits1(gbc);
  506.             } else {
  507.                 s->cpl_in_use[blk] = s->cpl_in_use[blk-1];
                                            ^
  508.             }
  509.             num_cpl_blocks += s->cpl_in_use[blk];
