libavformat/gxfenc.c:196: error: Integer Overflow R2
  ([0, +oo] + 1):signed32.

libavformat/gxfenc.c:190:12: <LHS trace>
188.         starting_line = 23; // default PAL
189. 
190.     size = snprintf(buffer, 1024, "Ver 1\nBr %.6f\nIpg 1\nPpi %d\nBpiop %d\n"
                ^
191.                     "Pix 0\nCf %d\nCg %d\nSl %d\nnl16 %d\nVi 1\nf1 1\n",
192.                     (float)st->codec->bit_rate, sc->p_per_gop, sc->b_per_i_or_p,

libavformat/gxfenc.c:190:12: Risky value from: snprintf
188.         starting_line = 23; // default PAL
189. 
190.     size = snprintf(buffer, 1024, "Ver 1\nBr %.6f\nIpg 1\nPpi %d\nBpiop %d\n"
                ^
191.                     "Pix 0\nCf %d\nCg %d\nSl %d\nnl16 %d\nVi 1\nf1 1\n",
192.                     (float)st->codec->bit_rate, sc->p_per_gop, sc->b_per_i_or_p,

libavformat/gxfenc.c:190:5: Assignment
188.         starting_line = 23; // default PAL
189. 
190.     size = snprintf(buffer, 1024, "Ver 1\nBr %.6f\nIpg 1\nPpi %d\nBpiop %d\n"
         ^
191.                     "Pix 0\nCf %d\nCg %d\nSl %d\nnl16 %d\nVi 1\nf1 1\n",
192.                     (float)st->codec->bit_rate, sc->p_per_gop, sc->b_per_i_or_p,

libavformat/gxfenc.c:196:5: Binary operation: ([0, +oo] + 1):signed32
194.                     starting_line, st->codec->height / 16);
195.     put_byte(pb, TRACK_MPG_AUX);
196.     put_byte(pb, size + 1);
         ^
197.     put_buffer(pb, (uint8_t *)buffer, size + 1);
198.     return size + 3;
