libavformat/http.c:619: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/http.c:541:5: Array declaration
539.     HTTPContext *s = h->priv_data;
540.     int post, err;
541.     char headers[HTTP_HEADERS_SIZE] = "";
         ^
542.     char *authstr = NULL, *proxyauthstr = NULL;
543.     int64_t off = s->off;

libavformat/http.c:619:16: Call
617. 
618.     if (!has_header(s->headers, "\r\nContent-Type: ") && s->content_type)
619.         len += av_strlcatf(headers + len, sizeof(headers) - len,
                    ^
620.                            "Content-Type: %s\r\n", s->content_type);
621.     if (!has_header(s->headers, "\r\nIcy-MetaData: ") && s->icy)

libavutil/avstring.c:99:1: <LHS trace>
 97. }
 98. 
 99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
     ^
100. {
101.     int len = strlen(dst);

libavutil/avstring.c:99:1: Parameter `size`
   97. }
   98. 
   99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
       ^
  100. {
  101.     int len = strlen(dst);

libavutil/avstring.c:105:12: <RHS trace>
103. 
104.     va_start(vl, fmt);
105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
106.     va_end(vl);
107. 

libavutil/avstring.c:105:12: Risky value from: vsnprintf
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
  106.     va_end(vl);
  107. 

libavutil/avstring.c:105:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
           ^
  106.     va_end(vl);
  107. 
