libavformat/movenc.c:3580: error: Integer Overflow L1
  ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3575:9: Call
3573.         if (mov->tracks[mov->chapter_track].enc)
3574.             av_free(mov->tracks[mov->chapter_track].enc->extradata);
3575.         av_freep(&mov->tracks[mov->chapter_track].enc);
              ^
3576.     }
3577. 

libavutil/mem.c:207:26: Assignment
  205. 
  206.     memcpy(&val, arg, sizeof(val));
  207.     memcpy(arg, &(void *){ NULL }, sizeof(val));
                                ^
  208.     av_free(val);
  209. }

libavformat/movenc.c:3580:13: Call
3578.     for (i = 0; i < mov->nb_streams; i++) {
3579.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3580.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3581.         av_freep(&mov->tracks[i].cluster);
3582.         av_freep(&mov->tracks[i].frag_info);

libavformat/movenchint.c:458:1: Parameter `track->rtp_ctx->nb_chapters`
  456. }
  457. 
  458. void ff_mov_close_hinting(MOVTrack *track)
       ^
  459. {
  460.     AVFormatContext *rtp_ctx = track->rtp_ctx;

libavformat/movenchint.c:472:5: Call
  470.         av_free(ptr);
  471.     }
  472.     avformat_free_context(rtp_ctx);
           ^
  473. }

libavformat/utils.c:2432:1: <LHS trace>
2430. }
2431. 
2432. void avformat_free_context(AVFormatContext *s)
      ^
2433. {
2434.     int i, j;

libavformat/utils.c:2432:1: Parameter `s->nb_chapters`
    2430. }
    2431. 
    2432. void avformat_free_context(AVFormatContext *s)
          ^
    2433. {
    2434.     int i, j;

libavformat/utils.c:2475:12: Binary operation: ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2473.     av_freep(&s->programs);
    2474.     av_freep(&s->priv_data);
    2475.     while (s->nb_chapters--) {
                     ^
    2476.         av_dict_free(&s->chapters[s->nb_chapters]->metadata);
    2477.         av_free(s->chapters[s->nb_chapters]);
