libavformat/mpegts.c:1418: error: Integer Overflow L2
  ([-1, min(4093, `*section`)] - 2):unsigned8.

libavformat/mpegts.c:1400:27: <LHS trace>
1398.     av_dlog(ts->stream, "pcr_pid=0x%x\n", pcr_pid);
1399. 
1400.     program_info_length = get16(&p, p_end);
                                ^
1401.     if (program_info_length < 0)
1402.         return;

libavformat/mpegts.c:1400:27: Call
1398.     av_dlog(ts->stream, "pcr_pid=0x%x\n", pcr_pid);
1399. 
1400.     program_info_length = get16(&p, p_end);
                                ^
1401.     if (program_info_length < 0)
1402.         return;

libavformat/mpegts.c:452:9: Assignment
  450.     p = *pp;
  451.     if ((p + 1) >= p_end)
  452.         return -1;
               ^
  453.     c = AV_RB16(p);
  454.     p += 2;

libavformat/mpegts.c:1400:5: Assignment
1398.     av_dlog(ts->stream, "pcr_pid=0x%x\n", pcr_pid);
1399. 
1400.     program_info_length = get16(&p, p_end);
          ^
1401.     if (program_info_length < 0)
1402.         return;

libavformat/mpegts.c:1403:5: Assignment
1401.     if (program_info_length < 0)
1402.         return;
1403.     program_info_length &= 0xfff;
          ^
1404.     while(program_info_length >= 2) {
1405.         uint8_t tag, len;

libavformat/mpegts.c:1418:13: Binary operation: ([-1, min(4093, *section)] - 2):unsigned8
1416.             get8(&p, p_end); // scope
1417.             get8(&p, p_end); // label
1418.             len -= 2;
                  ^
1419.             mp4_read_iods(ts->stream, p, len, mp4_descr + mp4_descr_count,
1420.                           &mp4_descr_count, MAX_MP4_DESCR_COUNT);
