libavcodec/mpegaudiodec.c:2499: error: Buffer Overrun L2
  Offset: [0, 8] Size: 2 by call to `mp_decode_frame`.

libavcodec/mpegaudiodec.c:2493:19: Call
2491.         assert (m != NULL);
2492. 
2493.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
                        ^
2494. 
2495.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavutil/bswap.h:52:1: Parameter `x`
  50. 
  51. #ifndef bswap_32
  52. static av_always_inline av_const uint32_t bswap_32(uint32_t x)
      ^
  53. {
  54.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);

libavutil/bswap.h:54:5: Assignment
  52. static av_always_inline av_const uint32_t bswap_32(uint32_t x)
  53. {
  54.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
          ^
  55.     x= (x>>16) | (x<<16);
  56.     return x;

libavutil/bswap.h:55:5: Assignment
  53. {
  54.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
  55.     x= (x>>16) | (x<<16);
          ^
  56.     return x;
  57. }

libavutil/bswap.h:56:5: Assignment
  54.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
  55.     x= (x>>16) | (x<<16);
  56.     return x;
          ^
  57. }
  58. #endif

libavcodec/mpegaudiodec.c:2493:9: Assignment
2491.         assert (m != NULL);
2492. 
2493.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
              ^
2494. 
2495.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavcodec/mpegaudiodec.c:2498:9: Call
2496.             break;
2497. 
2498.         ff_mpegaudio_decode_header((MPADecodeHeader *)m, header);
              ^
2499.         out_size += mp_decode_frame(m, outptr, buf, fsize);
2500.         buf += fsize;

libavcodec/mpegaudiodecheader.c:39:9: Assignment
  37.     if (header & (1<<20)) {
  38.         s->lsf = (header & (1<<19)) ? 0 : 1;
  39.         mpeg25 = 0;
              ^
  40.     } else {
  41.         s->lsf = 1;

libavcodec/mpegaudiodecheader.c:49:5: Assignment
  47.     sample_rate_index = (header >> 10) & 3;
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
          ^
  50.     s->sample_rate_index = sample_rate_index;
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;

libavcodec/mpegaudiodecheader.c:50:5: Assignment
  48.     sample_rate = ff_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  49.     sample_rate_index += 3 * (s->lsf + mpeg25);
  50.     s->sample_rate_index = sample_rate_index;
          ^
  51.     s->error_protection = ((header >> 16) & 1) ^ 1;
  52.     s->sample_rate = sample_rate;

libavcodec/mpegaudiodec.c:2499:21: Call
2497. 
2498.         ff_mpegaudio_decode_header((MPADecodeHeader *)m, header);
2499.         out_size += mp_decode_frame(m, outptr, buf, fsize);
                          ^
2500.         buf += fsize;
2501.         len -= fsize;

libavcodec/mpegaudiodec.c:2186:1: Parameter `s->nb_channels`
  2184. }
  2185. 
  2186. static int mp_decode_frame(MPADecodeContext *s,
        ^
  2187.                            OUT_INT *samples, const uint8_t *buf, int buf_size)
  2188. {

libavcodec/mpegaudiodec.c:2202:21: Call
  2200.     case 1:
  2201.         s->avctx->frame_size = 384;
  2202.         nb_frames = mp_decode_layer1(s);
                            ^
  2203.         break;
  2204.     case 2:

libavcodec/mpegaudiodec.c:1117:1: <Offset trace>
1115. 
1116. /* return the number of decoded frames */
1117. static int mp_decode_layer1(MPADecodeContext *s)
      ^
1118. {
1119.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:1117:1: Parameter `s->nb_channels`
    1115. 
    1116. /* return the number of decoded frames */
    1117. static int mp_decode_layer1(MPADecodeContext *s)
          ^
    1118. {
    1119.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:1117:1: <Length trace>
1115. 
1116. /* return the number of decoded frames */
1117. static int mp_decode_layer1(MPADecodeContext *s)
      ^
1118. {
1119.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:1117:1: Array declaration
    1115. 
    1116. /* return the number of decoded frames */
    1117. static int mp_decode_layer1(MPADecodeContext *s)
          ^
    1118. {
    1119.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:1131:13: Array access: Offset: [0, 8] Size: 2 by call to `mp_decode_frame` 
    1129.     for(i=0;i<bound;i++) {
    1130.         for(ch=0;ch<s->nb_channels;ch++) {
    1131.             allocation[ch][i] = get_bits(&s->gb, 4);
                      ^
    1132.         }
    1133.     }
