avconv.c:2220: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp`.

avconv.c:2100:25: Unknown value from: fopen
2098.                          i);
2099.                 if (codec->flags & CODEC_FLAG_PASS1) {
2100.                     f = fopen(logfilename, "wb");
                              ^
2101.                     if (!f) {
2102.                         fprintf(stderr, "Cannot write log file '%s' for pass-1 encoding: %s\n", logfilename, strerror(errno));

avconv.c:2220:9: Call
2218. 
2219.     if (want_sdp) {
2220.         print_sdp(output_files, nb_output_files);
              ^
2221.     }
2222. 

avconv.c:1807:1: Parameter `sdp.strlen`
  1805. }
  1806. 
  1807. static void print_sdp(OutputFile *output_files, int n)
        ^
  1808. {
  1809.     char sdp[2048];

avconv.c:1818:5: Call
  1816.         avc[i] = output_files[i].ctx;
  1817. 
  1818.     av_sdp_create(avc, n, sdp, sizeof(sdp));
            ^
  1819.     printf("SDP:\n%s\n", sdp);
  1820.     fflush(stdout);

libavformat/sdp.c:556:1: Parameter `buf->strlen`
    554. }
    555. 
    556. int av_sdp_create(AVFormatContext *ac[], int n_files, char *buf, int size)
         ^
    557. {
    558.     AVDictionaryEntry *title = av_dict_get(ac[0]->metadata, "title", NULL, 0);

libavformat/sdp.c:588:5: Call
    586.         }
    587.     }
    588.     sdp_write_header(buf, size, &s);
             ^
    589. 
    590.     dst[0] = 0;

libavformat/sdp.c:73:1: Parameter `buff->strlen`
      71. }
      72. 
      73. static void sdp_write_header(char *buff, int size, struct sdp_session_level *s)
          ^
      74. {
      75.     av_strlcatf(buff, size, "v=%d\r\n"

libavformat/sdp.c:75:5: Call
      73. static void sdp_write_header(char *buff, int size, struct sdp_session_level *s)
      74. {
      75.     av_strlcatf(buff, size, "v=%d\r\n"
              ^
      76.                             "o=- %d %d IN %s %s\r\n"
      77.                             "s=%s\r\n",

libavutil/avstring.c:82:1: <LHS trace>
80. }
81. 
82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
83. {
84.     int len = strlen(dst);

libavutil/avstring.c:82:1: Parameter `size`
        80. }
        81. 
        82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
            ^
        83. {
        84.     int len = strlen(dst);

libavutil/avstring.c:88:12: <RHS trace>
86. 
87.     va_start(vl, fmt);
88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
89.     va_end(vl);
90. 

libavutil/avstring.c:88:12: Risky value from: vsnprintf
        86. 
        87.     va_start(vl, fmt);
        88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                       ^
        89.     va_end(vl);
        90. 

libavutil/avstring.c:88:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp` 
        86. 
        87.     va_start(vl, fmt);
        88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
        89.     va_end(vl);
        90. 
