libavformat/mpegtsenc.c:330: error: Buffer Overrun L2
  Offset added: [5, 189] (⇐ [4, 5] + [1, 184]) Size: 188 by call to `mpegts_write_section1`.

libavformat/mpegtsenc.c:296:1: Array declaration
294. }
295. 
296. static void mpegts_write_sdt(AVFormatContext *s)
     ^
297. {
298.     MpegTSWrite *ts = s->priv_data;

libavformat/mpegtsenc.c:330:5: Call
328.         desc_list_len_ptr[1] = val;
329.     }
330.     mpegts_write_section1(&ts->sdt, SDT_TID, ts->tsid, 0, 0, 0,
         ^
331.                           data, q - data);
332. }

libavformat/mpegtsenc.c:93:1: Parameter `len`
  91. }
  92. 
  93. static int mpegts_write_section1(MpegTSSection *s, int tid, int id,
      ^
  94.                           int version, int sec_num, int last_sec_num,
  95.                           uint8_t *buf, int len)

libavformat/mpegtsenc.c:100:5: Assignment
   98.     unsigned int tot_len;
   99. 
  100.     tot_len = 3 + 5 + len + 4;
           ^
  101.     /* check if not too big */
  102.     if (tot_len > 1024)

libavformat/mpegtsenc.c:114:5: Call
  112.     memcpy(q, buf, len);
  113. 
  114.     mpegts_write_section(s, section, tot_len);
           ^
  115.     return 0;
  116. }

libavformat/mpegtsenc.c:38:1: <Offset trace>
36. 
37. /* NOTE: 4 bytes must be left at the end for the crc32 */
38. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
    ^
39. {
40.     unsigned int crc;

libavformat/mpegtsenc.c:38:1: Parameter `len`
    36. 
    37. /* NOTE: 4 bytes must be left at the end for the crc32 */
    38. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
        ^
    39. {
    40.     unsigned int crc;

libavformat/mpegtsenc.c:38:1: <Length trace>
36. 
37. /* NOTE: 4 bytes must be left at the end for the crc32 */
38. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
    ^
39. {
40.     unsigned int crc;

libavformat/mpegtsenc.c:38:1: Array declaration
    36. 
    37. /* NOTE: 4 bytes must be left at the end for the crc32 */
    38. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
        ^
    39. {
    40.     unsigned int crc;

libavformat/mpegtsenc.c:56:9: Assignment
    54.     while (len > 0) {
    55.         first = (buf == buf_ptr);
    56.         q = packet;
                ^
    57.         *q++ = 0x47;
    58.         b = (s->pid >> 8);

libavformat/mpegtsenc.c:57:10: Assignment
    55.         first = (buf == buf_ptr);
    56.         q = packet;
    57.         *q++ = 0x47;
                 ^
    58.         b = (s->pid >> 8);
    59.         if (first)

libavformat/mpegtsenc.c:61:10: Assignment
    59.         if (first)
    60.             b |= 0x40;
    61.         *q++ = b;
                 ^
    62.         *q++ = s->pid;
    63.         s->cc = (s->cc + 1) & 0xf;

libavformat/mpegtsenc.c:62:10: Assignment
    60.             b |= 0x40;
    61.         *q++ = b;
    62.         *q++ = s->pid;
                 ^
    63.         s->cc = (s->cc + 1) & 0xf;
    64.         *q++ = 0x10 | s->cc;

libavformat/mpegtsenc.c:64:10: Assignment
    62.         *q++ = s->pid;
    63.         s->cc = (s->cc + 1) & 0xf;
    64.         *q++ = 0x10 | s->cc;
                 ^
    65.         if (first)
    66.             *q++ = 0; /* 0 offset */

libavformat/mpegtsenc.c:70:9: Array access: Offset added: [5, 189] (⇐ [4, 5] + [1, 184]) Size: 188 by call to `mpegts_write_section1` 
    68.         if (len1 > len)
    69.             len1 = len;
    70.         memcpy(q, buf_ptr, len1);
                ^
    71.         q += len1;
    72.         /* add known padding data */
