libavformat/movenc.c:3232: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3224:9: Call
3222.     } else {
3223.         mov_flush_fragment(s);
3224.         mov_write_mfra_tag(pb, mov);
              ^
3225.     }
3226. 

libavformat/movenc.c:2431:1: Parameter `mov->tracks->nb_frag_info`
  2429. }
  2430. 
  2431. static int mov_write_mfra_tag(AVIOContext *pb, MOVMuxContext *mov)
        ^
  2432. {
  2433.     int64_t pos = avio_tell(pb);

libavformat/movenc.c:3232:13: Call
3230.     for (i = 0; i < mov->nb_streams; i++) {
3231.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3232.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3233.         if (mov->flags & FF_MOV_FLAG_FRAGMENT &&
3234.             mov->tracks[i].vc1_info.struct_offset && s->pb->seekable) {

libavformat/movenchint.c:448:1: Parameter `track->rtp_ctx->nb_programs`
  446. }
  447. 
  448. void ff_mov_close_hinting(MOVTrack *track)
       ^
  449. {
  450.     AVFormatContext *rtp_ctx = track->rtp_ctx;

libavformat/movenchint.c:462:5: Call
  460.         av_free(ptr);
  461.     }
  462.     avformat_free_context(rtp_ctx);
           ^
  463. }

libavformat/utils.c:2494:1: <LHS trace>
2492. }
2493. 
2494. void avformat_free_context(AVFormatContext *s)
      ^
2495. {
2496.     int i;

libavformat/utils.c:2494:1: Parameter `s->nb_programs`
    2492. }
    2493. 
    2494. void avformat_free_context(AVFormatContext *s)
          ^
    2495. {
    2496.     int i;

libavformat/utils.c:2521:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2519.         av_free(st);
    2520.     }
    2521.     for(i=s->nb_programs-1; i>=0; i--) {
                  ^
    2522.         av_dict_free(&s->programs[i]->metadata);
    2523.         av_freep(&s->programs[i]->stream_index);
