libavformat/mpegtsenc.c:766: error: Buffer Overrun L2
  Offset added: [157-min(152, `payload_size`), 218] (⇐ [157-min(152, `payload_size`), 187] + [0, 31]) Size: 188.

libavformat/mpegtsenc.c:606:1: <Offset trace>
604.  * NOTE: 'payload' contains a complete PES payload.
605.  */
606. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
607.                              const uint8_t *payload, int payload_size,
608.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:606:1: Array declaration
604.  * NOTE: 'payload' contains a complete PES payload.
605.  */
606. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
607.                              const uint8_t *payload, int payload_size,
608.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:748:9: Assignment
746.         }
747.         /* header size */
748.         header_len = q - buf;
             ^
749.         /* data len */
750.         len = TS_PACKET_SIZE - header_len;

libavformat/mpegtsenc.c:606:1: <Length trace>
604.  * NOTE: 'payload' contains a complete PES payload.
605.  */
606. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
607.                              const uint8_t *payload, int payload_size,
608.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:606:1: Array declaration
604.  * NOTE: 'payload' contains a complete PES payload.
605.  */
606. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
607.                              const uint8_t *payload, int payload_size,
608.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:766:17: Array access: Offset added: [157-min(152, payload_size), 218] (⇐ [157-min(152, payload_size), 187] + [0, 31]) Size: 188
764.             } else {
765.                 /* add stuffing */
766.                 memmove(buf + 4 + stuffing_len, buf + 4, header_len - 4);
                     ^
767.                 buf[3] |= 0x20;
768.                 buf[4] = stuffing_len - 1;
