libavformat/movenc.c:3190: error: Integer Overflow L2
  ([0, +oo] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3182:9: Call
3180.     } else {
3181.         mov_flush_fragment(s);
3182.         mov_write_mfra_tag(pb, mov);
              ^
3183.     }
3184. 

libavformat/movenc.c:2420:1: Parameter `mov->tracks->nb_frag_info`
  2418. }
  2419. 
  2420. static int mov_write_mfra_tag(AVIOContext *pb, MOVMuxContext *mov)
        ^
  2421. {
  2422.     int64_t pos = avio_tell(pb);

libavformat/movenc.c:3190:13: Call
3188.     for (i=0; i<mov->nb_streams; i++) {
3189.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3190.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3191.         if (mov->flags & FF_MOV_FLAG_FRAGMENT &&
3192.             mov->tracks[i].vc1_info.struct_offset && s->pb->seekable) {

libavformat/movenchint.c:448:1: Parameter `track->rtp_ctx->nb_programs`
  446. }
  447. 
  448. void ff_mov_close_hinting(MOVTrack *track) {
       ^
  449.     AVFormatContext* rtp_ctx = track->rtp_ctx;
  450.     uint8_t *ptr;

libavformat/movenchint.c:461:5: Call
  459.         av_free(ptr);
  460.     }
  461.     avformat_free_context(rtp_ctx);
           ^
  462. }

libavformat/utils.c:2546:1: <LHS trace>
2544. }
2545. 
2546. void avformat_free_context(AVFormatContext *s)
      ^
2547. {
2548.     int i;

libavformat/utils.c:2546:1: Parameter `s->nb_programs`
    2544. }
    2545. 
    2546. void avformat_free_context(AVFormatContext *s)
          ^
    2547. {
    2548.     int i;

libavformat/utils.c:2571:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2569.         av_free(st);
    2570.     }
    2571.     for(i=s->nb_programs-1; i>=0; i--) {
                  ^
    2572.         av_dict_free(&s->programs[i]->metadata);
    2573.         av_freep(&s->programs[i]->stream_index);
