libavformat/movenc.c:3143: error: Integer Overflow L1
  ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3138:9: Call
3136.         if (mov->tracks[mov->chapter_track].enc)
3137.             av_free(mov->tracks[mov->chapter_track].enc->extradata);
3138.         av_freep(&mov->tracks[mov->chapter_track].enc);
              ^
3139.     }
3140. 

libavutil/mem.c:202:5: Assignment
  200.     void **ptr = (void **)arg;
  201.     av_free(*ptr);
  202.     *ptr = NULL;
           ^
  203. }
  204. 

libavformat/movenc.c:3143:13: Call
3141.     for (i = 0; i < mov->nb_streams; i++) {
3142.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3143.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3144.         av_freep(&mov->tracks[i].cluster);
3145.         av_freep(&mov->tracks[i].frag_info);

libavformat/movenchint.c:458:1: Parameter `track->rtp_ctx->nb_chapters`
  456. }
  457. 
  458. void ff_mov_close_hinting(MOVTrack *track)
       ^
  459. {
  460.     AVFormatContext *rtp_ctx = track->rtp_ctx;

libavformat/movenchint.c:472:5: Call
  470.         av_free(ptr);
  471.     }
  472.     avformat_free_context(rtp_ctx);
           ^
  473. }

libavformat/utils.c:2595:1: <LHS trace>
2593. }
2594. 
2595. void avformat_free_context(AVFormatContext *s)
      ^
2596. {
2597.     int i;

libavformat/utils.c:2595:1: Parameter `s->nb_chapters`
    2593. }
    2594. 
    2595. void avformat_free_context(AVFormatContext *s)
          ^
    2596. {
    2597.     int i;

libavformat/utils.c:2629:12: Binary operation: ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2627.     av_freep(&s->programs);
    2628.     av_freep(&s->priv_data);
    2629.     while (s->nb_chapters--) {
                     ^
    2630.         av_dict_free(&s->chapters[s->nb_chapters]->metadata);
    2631.         av_free(s->chapters[s->nb_chapters]);
