libavformat/mpegtsenc.c:379: error: Buffer Overrun L2
  Offset added: [6, 372] (⇐ [5, 189] + [1, 183]) Size: 188 by call to `mpegts_write_section1`.

libavformat/mpegtsenc.c:249:1: Array declaration
247. }
248. 
249. static void mpegts_write_pmt(AVFormatContext *s, MpegTSService *service)
     ^
250. {
251.     MpegTSWrite *ts = s->priv_data;

libavformat/mpegtsenc.c:379:5: Call
377.         desc_length_ptr[1] = val;
378.     }
379.     mpegts_write_section1(&service->pmt, PMT_TID, service->sid, 0, 0, 0,
         ^
380.                           data, q - data);
381. }

libavformat/mpegtsenc.c:181:1: Parameter `len`
  179. }
  180. 
  181. static int mpegts_write_section1(MpegTSSection *s, int tid, int id,
       ^
  182.                           int version, int sec_num, int last_sec_num,
  183.                           uint8_t *buf, int len)

libavformat/mpegtsenc.c:190:5: Assignment
  188.     unsigned int flags = tid == SDT_TID ? 0xf000 : 0xb000;
  189. 
  190.     tot_len = 3 + 5 + len + 4;
           ^
  191.     /* check if not too big */
  192.     if (tot_len > 1024)

libavformat/mpegtsenc.c:204:5: Call
  202.     memcpy(q, buf, len);
  203. 
  204.     mpegts_write_section(s, section, tot_len);
           ^
  205.     return 0;
  206. }

libavformat/mpegtsenc.c:126:1: <Offset trace>
124. 
125. /* NOTE: 4 bytes must be left at the end for the crc32 */
126. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
     ^
127. {
128.     unsigned int crc;

libavformat/mpegtsenc.c:126:1: Array declaration
    124. 
    125. /* NOTE: 4 bytes must be left at the end for the crc32 */
    126. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
         ^
    127. {
    128.     unsigned int crc;

libavformat/mpegtsenc.c:161:9: Assignment
    159.         q += len1;
    160.         /* add known padding data */
    161.         left = TS_PACKET_SIZE - (q - packet);
                 ^
    162.         if (left > 0)
    163.             memset(q, 0xff, left);

libavformat/mpegtsenc.c:126:1: <Length trace>
124. 
125. /* NOTE: 4 bytes must be left at the end for the crc32 */
126. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
     ^
127. {
128.     unsigned int crc;

libavformat/mpegtsenc.c:126:1: Parameter `len`
    124. 
    125. /* NOTE: 4 bytes must be left at the end for the crc32 */
    126. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
         ^
    127. {
    128.     unsigned int crc;

libavformat/mpegtsenc.c:159:9: Assignment
    157.             len1 = len;
    158.         memcpy(q, buf_ptr, len1);
    159.         q += len1;
                 ^
    160.         /* add known padding data */
    161.         left = TS_PACKET_SIZE - (q - packet);

libavformat/mpegtsenc.c:163:13: Array access: Offset added: [6, 372] (⇐ [5, 189] + [1, 183]) Size: 188 by call to `mpegts_write_section1` 
    161.         left = TS_PACKET_SIZE - (q - packet);
    162.         if (left > 0)
    163.             memset(q, 0xff, left);
                     ^
    164. 
    165.         s->write_packet(s, packet);
