libavcodec/mpegaudiodec.c:2020: error: Buffer Overrun L2
  Offset: [0, 8] Size: 2 by call to `mp_decode_frame`.

libavcodec/mpegaudiodec.c:2014:19: Call
2012.         assert (m != NULL);
2013. 
2014.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
                        ^
2015. 
2016.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavutil/bswap.h:66:1: Parameter `x`
  64. 
  65. #ifndef av_bswap32
  66. static av_always_inline av_const uint32_t av_bswap32(uint32_t x)
      ^
  67. {
  68.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);

libavutil/bswap.h:68:5: Assignment
  66. static av_always_inline av_const uint32_t av_bswap32(uint32_t x)
  67. {
  68.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
          ^
  69.     x= (x>>16) | (x<<16);
  70.     return x;

libavutil/bswap.h:69:5: Assignment
  67. {
  68.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
  69.     x= (x>>16) | (x<<16);
          ^
  70.     return x;
  71. }

libavutil/bswap.h:70:5: Assignment
  68.     x= ((x<<8)&0xFF00FF00) | ((x>>8)&0x00FF00FF);
  69.     x= (x>>16) | (x<<16);
  70.     return x;
          ^
  71. }
  72. #endif

libavcodec/mpegaudiodec.c:2014:9: Assignment
2012.         assert (m != NULL);
2013. 
2014.         header = (AV_RB32(buf) & 0x000fffff) | s->syncword; // patch header
              ^
2015. 
2016.         if (ff_mpa_check_header(header) < 0) // Bad header, discard block

libavcodec/mpegaudiodec.c:2019:9: Call
2017.             break;
2018. 
2019.         avpriv_mpegaudio_decode_header((MPADecodeHeader *)m, header);
              ^
2020.         out_size += mp_decode_frame(m, outptr, buf, fsize);
2021.         buf += fsize;

libavcodec/mpegaudiodecheader.c:40:9: Assignment
  38.     if (header & (1<<20)) {
  39.         s->lsf = (header & (1<<19)) ? 0 : 1;
  40.         mpeg25 = 0;
              ^
  41.     } else {
  42.         s->lsf = 1;

libavcodec/mpegaudiodecheader.c:50:5: Assignment
  48.     sample_rate_index = (header >> 10) & 3;
  49.     sample_rate = avpriv_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  50.     sample_rate_index += 3 * (s->lsf + mpeg25);
          ^
  51.     s->sample_rate_index = sample_rate_index;
  52.     s->error_protection = ((header >> 16) & 1) ^ 1;

libavcodec/mpegaudiodecheader.c:51:5: Assignment
  49.     sample_rate = avpriv_mpa_freq_tab[sample_rate_index] >> (s->lsf + mpeg25);
  50.     sample_rate_index += 3 * (s->lsf + mpeg25);
  51.     s->sample_rate_index = sample_rate_index;
          ^
  52.     s->error_protection = ((header >> 16) & 1) ^ 1;
  53.     s->sample_rate = sample_rate;

libavcodec/mpegaudiodec.c:2020:21: Call
2018. 
2019.         avpriv_mpegaudio_decode_header((MPADecodeHeader *)m, header);
2020.         out_size += mp_decode_frame(m, outptr, buf, fsize);
                          ^
2021.         buf += fsize;
2022.         len -= fsize;

libavcodec/mpegaudiodec.c:1700:1: Parameter `s->nb_channels`
  1698. }
  1699. 
  1700. static int mp_decode_frame(MPADecodeContext *s,
        ^
  1701.                            OUT_INT *samples, const uint8_t *buf, int buf_size)
  1702. {

libavcodec/mpegaudiodec.c:1716:21: Call
  1714.     case 1:
  1715.         s->avctx->frame_size = 384;
  1716.         nb_frames = mp_decode_layer1(s);
                            ^
  1717.         break;
  1718.     case 2:

libavcodec/mpegaudiodec.c:642:1: <Offset trace>
640. 
641. /* return the number of decoded frames */
642. static int mp_decode_layer1(MPADecodeContext *s)
     ^
643. {
644.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:642:1: Parameter `s->nb_channels`
    640. 
    641. /* return the number of decoded frames */
    642. static int mp_decode_layer1(MPADecodeContext *s)
         ^
    643. {
    644.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:642:1: <Length trace>
640. 
641. /* return the number of decoded frames */
642. static int mp_decode_layer1(MPADecodeContext *s)
     ^
643. {
644.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:642:1: Array declaration
    640. 
    641. /* return the number of decoded frames */
    642. static int mp_decode_layer1(MPADecodeContext *s)
         ^
    643. {
    644.     int bound, i, v, n, ch, j, mant;

libavcodec/mpegaudiodec.c:656:13: Array access: Offset: [0, 8] Size: 2 by call to `mp_decode_frame` 
    654.     for(i=0;i<bound;i++) {
    655.         for(ch=0;ch<s->nb_channels;ch++) {
    656.             allocation[ch][i] = get_bits(&s->gb, 4);
                     ^
    657.         }
    658.     }
