libavformat/rtsp.c:1150: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/rtsp.c:1121:1: Parameter `buf.strlen`
1119.  * @return zero if success, nonzero otherwise
1120.  */
1121. static int rtsp_send_cmd_with_content_async(AVFormatContext *s,
      ^
1122.                                             const char *method, const char *url,
1123.                                             const char *headers,

libavformat/rtsp.c:1150:9: Call
1148.     }
1149.     if (send_content_length > 0 && send_content)
1150.         av_strlcatf(buf, sizeof(buf), "Content-Length: %d\r\n", send_content_length);
              ^
1151.     av_strlcat(buf, "\r\n", sizeof(buf));
1152. 

libavutil/avstring.c:99:1: <LHS trace>
 97. }
 98. 
 99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
     ^
100. {
101.     int len = strlen(dst);

libavutil/avstring.c:99:1: Parameter `size`
   97. }
   98. 
   99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
       ^
  100. {
  101.     int len = strlen(dst);

libavutil/avstring.c:105:12: <RHS trace>
103. 
104.     va_start(vl, fmt);
105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
106.     va_end(vl);
107. 

libavutil/avstring.c:105:12: Risky value from: vsnprintf
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
  106.     va_end(vl);
  107. 

libavutil/avstring.c:105:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
           ^
  106.     va_end(vl);
  107. 

size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
{
    int len = strlen(dst);
    va_list vl;
    va_start(vl, fmt);
    len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
    va_end(vl);
    return len;
}
['static int rtsp_send_cmd_with_content_async(AVFormatContext *s,\n                                            const char *method, const char *url,\n                                            const char *headers,\n                                            const unsigned char *send_content,\n                                            int send_content_length)\n{\n    RTSPState *rt = s->priv_data;\n    char buf[4096], *out_buf;\n    char base64buf[AV_BASE64_SIZE(sizeof(buf))];\n    out_buf = buf;\n    rt->seq++;\n    snprintf(buf, sizeof(buf), "%s %s RTSP/1.0\\r\\n", method, url);\n    if (headers)\n        av_strlcat(buf, headers, sizeof(buf));\n    av_strlcatf(buf, sizeof(buf), "CSeq: %d\\r\\n", rt->seq);\n    if (rt->session_id[0] != \'\\0\' && (!headers ||\n        !strstr(headers, "\\nIf-Match:"))) {\n        av_strlcatf(buf, sizeof(buf), "Session: %s\\r\\n", rt->session_id);\n    }\n    if (rt->auth[0]) {\n        char *str = ff_http_auth_create_response(&rt->auth_state,\n                                                 rt->auth, url, method);\n        if (str)\n            av_strlcat(buf, str, sizeof(buf));\n        av_free(str);\n    }\n    if (send_content_length > 0 && send_content)\n        av_strlcatf(buf, sizeof(buf), "Content-Length: %d\\r\\n", send_content_length);\n    av_strlcat(buf, "\\r\\n", sizeof(buf));\n    if (rt->control_transport == RTSP_MODE_TUNNEL) {\n        av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));\n        out_buf = base64buf;\n    }\n    av_dlog(s, "Sending:\\n%s--\\n", buf);\n    ffurl_write(rt->rtsp_hd_out, out_buf, strlen(out_buf));\n    if (send_content_length > 0 && send_content) {\n        if (rt->control_transport == RTSP_MODE_TUNNEL) {\n            av_log(s, AV_LOG_ERROR, "tunneling of RTSP requests "\n                                    "with content data not supported\\n");\n            return AVERROR_PATCHWELCOME;\n        }\n        ffurl_write(rt->rtsp_hd_out, send_content, send_content_length);\n    }\n    rt->last_cmd_time = av_gettime();\n    return 0;\n}', 'size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)\n{\n    int len = strlen(dst);\n    va_list vl;\n    va_start(vl, fmt);\n    len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);\n    va_end(vl);\n    return len;\n}']