libavformat/movenc.c:3170: error: Integer Overflow L1
  ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting`.

libavformat/movenc.c:3165:9: Call
3163.         if (mov->tracks[mov->chapter_track].enc)
3164.             av_free(mov->tracks[mov->chapter_track].enc->extradata);
3165.         av_freep(&mov->tracks[mov->chapter_track].enc);
              ^
3166.     }
3167. 

libavutil/mem.c:202:5: Assignment
  200.     void **ptr = (void **)arg;
  201.     av_free(*ptr);
  202.     *ptr = NULL;
           ^
  203. }
  204. 

libavformat/movenc.c:3170:13: Call
3168.     for (i = 0; i < mov->nb_streams; i++) {
3169.         if (mov->tracks[i].tag == MKTAG('r','t','p',' '))
3170.             ff_mov_close_hinting(&mov->tracks[i]);
                  ^
3171.         av_freep(&mov->tracks[i].cluster);
3172.         av_freep(&mov->tracks[i].frag_info);

libavformat/movenchint.c:458:1: Parameter `track->rtp_ctx->nb_chapters`
  456. }
  457. 
  458. void ff_mov_close_hinting(MOVTrack *track)
       ^
  459. {
  460.     AVFormatContext *rtp_ctx = track->rtp_ctx;

libavformat/movenchint.c:472:5: Call
  470.         av_free(ptr);
  471.     }
  472.     avformat_free_context(rtp_ctx);
           ^
  473. }

libavformat/utils.c:2596:1: <LHS trace>
2594. }
2595. 
2596. void avformat_free_context(AVFormatContext *s)
      ^
2597. {
2598.     int i, j;

libavformat/utils.c:2596:1: Parameter `s->nb_chapters`
    2594. }
    2595. 
    2596. void avformat_free_context(AVFormatContext *s)
          ^
    2597. {
    2598.     int i, j;

libavformat/utils.c:2636:12: Binary operation: ([-oo, 0] - 1):unsigned32 by call to `ff_mov_close_hinting` 
    2634.     av_freep(&s->programs);
    2635.     av_freep(&s->priv_data);
    2636.     while (s->nb_chapters--) {
                     ^
    2637.         av_dict_free(&s->chapters[s->nb_chapters]->metadata);
    2638.         av_free(s->chapters[s->nb_chapters]);
