libavformat/movenc.c:3764: error: Integer Overflow L1
  ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3759:9: Call
3757.         if (mov->tracks[mov->chapter_track].enc)
3758.             av_free(mov->tracks[mov->chapter_track].enc->extradata);
3759.         av_freep(&mov->tracks[mov->chapter_track].enc);
              ^
3760.     }
3761. 

libavutil/mem.c:207:26: Assignment
  205. 
  206.     memcpy(&val, arg, sizeof(val));
  207.     memcpy(arg, &(void *){ NULL }, sizeof(val));
                                ^
  208.     av_free(val);
  209. }

libavformat/movenc.c:3764:13: Call
3762.     for (i = 0; i < mov->nb_streams; i++) {
3763.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3764.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3765.         av_freep(&mov->tracks[i].cluster);
3766.         av_freep(&mov->tracks[i].frag_info);

libavformat/movenchint.c:458:1: Parameter `track->rtp_ctx->nb_chapters`
  456. }
  457. 
  458. void ff_mov_close_hinting(MOVTrack *track)
       ^
  459. {
  460.     AVFormatContext *rtp_ctx = track->rtp_ctx;

libavformat/movenchint.c:470:5: Call
  468.         ffio_free_dyn_buf(&rtp_ctx->pb);
  469.     }
  470.     avformat_free_context(rtp_ctx);
           ^
  471. }

libavformat/utils.c:2477:1: <LHS trace>
2475. }
2476. 
2477. void avformat_free_context(AVFormatContext *s)
      ^
2478. {
2479.     int i;

libavformat/utils.c:2477:1: Parameter `s->nb_chapters`
    2475. }
    2476. 
    2477. void avformat_free_context(AVFormatContext *s)
          ^
    2478. {
    2479.     int i;

libavformat/utils.c:2498:12: Binary operation: ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2496.     av_freep(&s->programs);
    2497.     av_freep(&s->priv_data);
    2498.     while (s->nb_chapters--) {
                     ^
    2499.         av_dict_free(&s->chapters[s->nb_chapters]->metadata);
    2500.         av_free(s->chapters[s->nb_chapters]);
