libavformat/icecast.c:86: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/icecast.c:68:1: Parameter `buf->strlen`
66. 
67. 
68. static char *cat_header(char buf[], const char key[], const char value[])
    ^
69. {
70.     if (NOT_EMPTY(value)) {

libavformat/icecast.c:86:9: Call
84.             *buf = '\0';
85. 
86.         av_strlcatf(buf, len, "%s: %s\r\n", key, value);
            ^
87.     }
88.     return buf;

libavutil/avstring.c:99:1: <LHS trace>
 97. }
 98. 
 99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
     ^
100. {
101.     int len = strlen(dst);

libavutil/avstring.c:99:1: Parameter `size`
   97. }
   98. 
   99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
       ^
  100. {
  101.     int len = strlen(dst);

libavutil/avstring.c:105:12: <RHS trace>
103. 
104.     va_start(vl, fmt);
105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
106.     va_end(vl);
107. 

libavutil/avstring.c:105:12: Risky value from: vsnprintf
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
  106.     va_end(vl);
  107. 

libavutil/avstring.c:105:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
           ^
  106.     va_end(vl);
  107. 
