libavformat/http.c:477: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/http.c:435:5: Array declaration
433.     HTTPContext *s = h->priv_data;
434.     int post, err;
435.     char headers[1024] = "";
         ^
436.     char *authstr = NULL, *proxyauthstr = NULL;
437.     int64_t off = s->off;

libavformat/http.c:477:16: Call
475.                           sizeof(headers) - len);
476.     if (!has_header(s->headers, "\r\nRange: ") && !post)
477.         len += av_strlcatf(headers + len, sizeof(headers) - len,
                    ^
478.                            "Range: bytes=%"PRId64"-\r\n", s->off);
479.     if (send_expect_100 && !has_header(s->headers, "\r\nExpect: "))

libavutil/avstring.c:99:1: <LHS trace>
 97. }
 98. 
 99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
     ^
100. {
101.     int len = strlen(dst);

libavutil/avstring.c:99:1: Parameter `size`
   97. }
   98. 
   99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
       ^
  100. {
  101.     int len = strlen(dst);

libavutil/avstring.c:105:12: <RHS trace>
103. 
104.     va_start(vl, fmt);
105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
106.     va_end(vl);
107. 

libavutil/avstring.c:105:12: Risky value from: vsnprintf
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
  106.     va_end(vl);
  107. 

libavutil/avstring.c:105:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
           ^
  106.     va_end(vl);
  107. 
