CELT_SET_END_BAND_REQUEST in the decoder was performing the wrong bounds check and...