libavformat/http.c:585: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/http.c:532:5: Array declaration
530.     HTTPContext *s = h->priv_data;
531.     int post, err;
532.     char headers[HTTP_HEADERS_SIZE] = "";
         ^
533.     char *authstr = NULL, *proxyauthstr = NULL;
534.     int64_t off = s->off;

libavformat/http.c:585:20: Call
583.                            "Range: bytes=%"PRId64"-", s->off);
584.         if (s->end_off)
585.             len += av_strlcatf(headers + len, sizeof(headers) - len,
                        ^
586.                                "%"PRId64, s->end_off - 1);
587.         len += av_strlcpy(headers + len, "\r\n",

libavutil/avstring.c:99:1: <LHS trace>
 97. }
 98. 
 99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
     ^
100. {
101.     int len = strlen(dst);

libavutil/avstring.c:99:1: Parameter `size`
   97. }
   98. 
   99. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
       ^
  100. {
  101.     int len = strlen(dst);

libavutil/avstring.c:105:12: <RHS trace>
103. 
104.     va_start(vl, fmt);
105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
106.     va_end(vl);
107. 

libavutil/avstring.c:105:12: Risky value from: vsnprintf
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
  106.     va_end(vl);
  107. 

libavutil/avstring.c:105:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  103. 
  104.     va_start(vl, fmt);
  105.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
           ^
  106.     va_end(vl);
  107. 
