Integer overflow in sfconvert with the MSADPCM module.
https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/