avconv.c:2254: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp`.

avconv.c:2112:25: Unknown value from: fopen
2110.                          i);
2111.                 if (codec->flags & CODEC_FLAG_PASS1) {
2112.                     f = fopen(logfilename, "wb");
                              ^
2113.                     if (!f) {
2114.                         av_log(NULL, AV_LOG_FATAL, "Cannot write log file '%s' for pass-1 encoding: %s\n",

avconv.c:2227:5: Call
2225. 
2226.     /* dump the stream mapping */
2227.     av_log(NULL, AV_LOG_INFO, "Stream mapping:\n");
          ^
2228.     for (i = 0; i < nb_output_streams; i++) {
2229.         ost = &output_streams[i];

libavutil/log.c:129:1: Parameter `*avcl`
  127. static void (*av_log_callback)(void*, int, const char*, va_list) = av_log_default_callback;
  128. 
  129. void av_log(void* avcl, int level, const char *fmt, ...)
       ^
  130. {
  131.     AVClass* avc= avcl ? *(AVClass**)avcl : NULL;

avconv.c:2254:9: Call
2252. 
2253.     if (want_sdp) {
2254.         print_sdp(output_files, nb_output_files);
              ^
2255.     }
2256. 

avconv.c:1824:1: Parameter `sdp.strlen`
  1822. }
  1823. 
  1824. static void print_sdp(OutputFile *output_files, int n)
        ^
  1825. {
  1826.     char sdp[2048];

avconv.c:1835:5: Call
  1833.         avc[i] = output_files[i].ctx;
  1834. 
  1835.     av_sdp_create(avc, n, sdp, sizeof(sdp));
            ^
  1836.     printf("SDP:\n%s\n", sdp);
  1837.     fflush(stdout);

libavformat/sdp.c:553:1: Parameter `buf->strlen`
    551. }
    552. 
    553. int av_sdp_create(AVFormatContext *ac[], int n_files, char *buf, int size)
         ^
    554. {
    555.     AVDictionaryEntry *title = av_dict_get(ac[0]->metadata, "title", NULL, 0);

libavformat/sdp.c:585:5: Call
    583.         }
    584.     }
    585.     sdp_write_header(buf, size, &s);
             ^
    586. 
    587.     dst[0] = 0;

libavformat/sdp.c:73:1: Parameter `buff->strlen`
      71. }
      72. 
      73. static void sdp_write_header(char *buff, int size, struct sdp_session_level *s)
          ^
      74. {
      75.     av_strlcatf(buff, size, "v=%d\r\n"

libavformat/sdp.c:75:5: Call
      73. static void sdp_write_header(char *buff, int size, struct sdp_session_level *s)
      74. {
      75.     av_strlcatf(buff, size, "v=%d\r\n"
              ^
      76.                             "o=- %d %d IN %s %s\r\n"
      77.                             "s=%s\r\n",

libavutil/avstring.c:82:1: <LHS trace>
80. }
81. 
82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
83. {
84.     int len = strlen(dst);

libavutil/avstring.c:82:1: Parameter `size`
        80. }
        81. 
        82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
            ^
        83. {
        84.     int len = strlen(dst);

libavutil/avstring.c:88:12: <RHS trace>
86. 
87.     va_start(vl, fmt);
88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
89.     va_end(vl);
90. 

libavutil/avstring.c:88:12: Risky value from: vsnprintf
        86. 
        87.     va_start(vl, fmt);
        88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                       ^
        89.     va_end(vl);
        90. 

libavutil/avstring.c:88:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp` 
        86. 
        87.     va_start(vl, fmt);
        88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                ^
        89.     va_end(vl);
        90. 
