libavformat/mov.c:618: error: Buffer Overrun L3
  Offset: 3 Size: [0, 2147483631].

libavformat/mov.c:609:5: <Length trace>
607.         return 0;
608.     st= c->fc->streams[c->fc->nb_streams-1];
609.     size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
         ^
610.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
611.         return -1;

libavformat/mov.c:609:5: Assignment
607.         return 0;
608.     st= c->fc->streams[c->fc->nb_streams-1];
609.     size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
         ^
610.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
611.         return -1;

libavformat/mov.c:612:10: Call
610.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
611.         return -1;
612.     buf= av_realloc(st->codec->extradata, size);
              ^
613.     if(!buf)
614.         return -1;

libavutil/mem.c:102:9: Assignment
  100.     /* let's disallow possible ambiguous cases */
  101.     if(size > (INT_MAX-16) )
  102.         return NULL;
               ^
  103. 
  104. #ifdef CONFIG_MEMALIGN_HACK

libavformat/mov.c:612:5: Assignment
610.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
611.         return -1;
612.     buf= av_realloc(st->codec->extradata, size);
         ^
613.     if(!buf)
614.         return -1;

libavformat/mov.c:616:5: Assignment
614.         return -1;
615.     st->codec->extradata= buf;
616.     buf+= st->codec->extradata_size;
         ^
617.     st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
618.     AV_WB32(       buf    , atom.size + 8);

libavformat/mov.c:618:5: Array access: Offset: 3 Size: [0, 2147483631]
616.     buf+= st->codec->extradata_size;
617.     st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
618.     AV_WB32(       buf    , atom.size + 8);
         ^
619.     AV_WL32(       buf + 4, atom.type);
620.     get_buffer(pb, buf + 8, atom.size);
