libavformat/rtsp.c:1946: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_rtp_parse_packet`.

libavformat/rtsp.c:1918:15: Call
1916.     case RTSP_LOWER_TRANSPORT_UDP:
1917.     case RTSP_LOWER_TRANSPORT_UDP_MULTICAST:
1918.         len = udp_read_packet(s, &rtsp_st, rt->recvbuf, RECVBUF_SIZE, wait_end);
                    ^
1919.         if (len > 0 && rtsp_st->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
1920.             ff_rtp_check_and_send_back_rr(rtsp_st->transport_priv, rtsp_st->rtp_handle, NULL, len);

libavformat/rtsp.c:1755:13: Unknown value from: poll
  1753.             }
  1754.         }
  1755.         n = poll(p, max_p, POLL_TIMEOUT_MS);
                    ^
  1756.         if (n > 0) {
  1757.             int j = 1 - (tcp_fd == -1);

libavformat/rtsp.c:1946:15: Call
1944.         ret = ff_rdt_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
1945.     } else if (rt->transport == RTSP_TRANSPORT_RTP) {
1946.         ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
                    ^
1947.         if (rtsp_st->feedback) {
1948.             AVIOContext *pb = NULL;

libavformat/rtpdec.c:884:1: Parameter `s->srtp.roc`
  882.  * (use buf as NULL to read the next). -1 if no packet (error or no more packet).
  883.  */
  884. int ff_rtp_parse_packet(RTPDemuxContext *s, AVPacket *pkt,
       ^
  885.                         uint8_t **bufptr, int len)
  886. {

libavformat/rtpdec.c:888:38: Call
  886. {
  887.     int rv;
  888.     if (s->srtp_enabled && bufptr && ff_srtp_decrypt(&s->srtp, *bufptr, &len) < 0)
                                            ^
  889.         return -1;
  890.     rv = rtp_parse_one_packet(s, pkt, bufptr, len);

libavformat/srtp.c:120:1: <LHS trace>
118. }
119. 
120. int ff_srtp_decrypt(struct SRTPContext *s, uint8_t *buf, int *lenptr)
     ^
121. {
122.     uint8_t iv[16] = { 0 }, hmac[20];

libavformat/srtp.c:120:1: Parameter `s->roc`
    118. }
    119. 
    120. int ff_srtp_decrypt(struct SRTPContext *s, uint8_t *buf, int *lenptr)
         ^
    121. {
    122.     uint8_t iv[16] = { 0 }, hmac[20];

libavformat/srtp.c:148:13: Assignment
    146.         // RFC 3711 section 3.3.1, appendix A
    147.         seq_largest = s->seq_initialized ? s->seq_largest : seq;
    148.         v = roc = s->roc;
                     ^
    149.         if (seq_largest < 32768) {
    150.             if (seq - seq_largest > 32768)

libavformat/srtp.c:151:17: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_rtp_parse_packet` 
    149.         if (seq_largest < 32768) {
    150.             if (seq - seq_largest > 32768)
    151.                 v = roc - 1;
                         ^
    152.         } else {
    153.             if (seq_largest - 32768 > seq)
