libavformat/rtspdec.c:132: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `rtsp_send_reply`.

libavformat/rtspdec.c:129:9: Unknown value from: strcmp
127.         return 0;
128.     }
129.     if (strcmp(session_id, request->session_id)) {
             ^
130.         av_log(s, AV_LOG_ERROR, "Unexpected session-id %s\n",
131.                request->session_id);

libavformat/rtspdec.c:132:9: Call
130.         av_log(s, AV_LOG_ERROR, "Unexpected session-id %s\n",
131.                request->session_id);
132.         rtsp_send_reply(s, RTSP_STATUS_SESSION, NULL, request->seq);
             ^
133.         return AVERROR_STREAM_NOT_FOUND;
134.     }

libavformat/rtspdec.c:93:1: Parameter `message.strlen`
  91. }
  92. 
  93. static int rtsp_send_reply(AVFormatContext *s, enum RTSPStatusCode code,
      ^
  94.                            const char *extracontent, uint16_t seq)
  95. {

libavformat/rtspdec.c:109:5: Call
  107.     if (!status_messages[index].code)
  108.         return AVERROR(EINVAL);
  109.     av_strlcatf(message, sizeof(message), "CSeq: %d\r\n", seq);
           ^
  110.     av_strlcatf(message, sizeof(message), "Server: %s\r\n", LIBAVFORMAT_IDENT);
  111.     if (extracontent)

libavutil/avstring.c:82:1: <LHS trace>
80. }
81. 
82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
83. {
84.     int len = strlen(dst);

libavutil/avstring.c:82:1: Parameter `size`
    80. }
    81. 
    82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
        ^
    83. {
    84.     int len = strlen(dst);

libavutil/avstring.c:88:12: <RHS trace>
86. 
87.     va_start(vl, fmt);
88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
89.     va_end(vl);
90. 

libavutil/avstring.c:88:12: Risky value from: vsnprintf
    86. 
    87.     va_start(vl, fmt);
    88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                   ^
    89.     va_end(vl);
    90. 

libavutil/avstring.c:88:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `rtsp_send_reply` 
    86. 
    87.     va_start(vl, fmt);
    88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
            ^
    89.     va_end(vl);
    90. 

size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
{
    int len = strlen(dst);
    va_list vl;
    va_start(vl, fmt);
    len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
    va_end(vl);
    return len;
}
['static inline int check_sessionid(AVFormatContext *s,\n                                  RTSPMessageHeader *request)\n{\n    RTSPState *rt = s->priv_data;\n    unsigned char *session_id = rt->session_id;\n    if (!session_id[0]) {\n        av_log(s, AV_LOG_WARNING, "There is no session-id at the moment\\n");\n        return 0;\n    }\n    if (strcmp(session_id, request->session_id)) {\n        av_log(s, AV_LOG_ERROR, "Unexpected session-id %s\\n",\n               request->session_id);\n        rtsp_send_reply(s, RTSP_STATUS_SESSION, NULL, request->seq);\n        return AVERROR_STREAM_NOT_FOUND;\n    }\n    return 0;\n}', 'static int rtsp_send_reply(AVFormatContext *s, enum RTSPStatusCode code,\n                           const char *extracontent, uint16_t seq)\n{\n    RTSPState *rt = s->priv_data;\n    char message[4096];\n    int index = 0;\n    while (status_messages[index].code) {\n        if (status_messages[index].code == code) {\n            snprintf(message, sizeof(message), "RTSP/1.0 %d %s\\r\\n",\n                     code, status_messages[index].message);\n            break;\n        }\n        index++;\n    }\n    if (!status_messages[index].code)\n        return AVERROR(EINVAL);\n    av_strlcatf(message, sizeof(message), "CSeq: %d\\r\\n", seq);\n    av_strlcatf(message, sizeof(message), "Server: %s\\r\\n", LIBAVFORMAT_IDENT);\n    if (extracontent)\n        av_strlcat(message, extracontent, sizeof(message));\n    av_strlcat(message, "\\r\\n", sizeof(message));\n    av_dlog(s, "Sending response:\\n%s", message);\n    ffurl_write(rt->rtsp_hd, message, strlen(message));\n    return 0;\n}', 'size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)\n{\n    int len = strlen(dst);\n    va_list vl;\n    va_start(vl, fmt);\n    len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);\n    va_end(vl);\n    return len;\n}']