libavformat/mov.c:623: error: Buffer Overrun L3
  Offset: 3 Size: [0, 2147483631].

libavformat/mov.c:614:5: <Length trace>
612.         return 0;
613.     st= c->fc->streams[c->fc->nb_streams-1];
614.     size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
         ^
615.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
616.         return -1;

libavformat/mov.c:614:5: Assignment
612.         return 0;
613.     st= c->fc->streams[c->fc->nb_streams-1];
614.     size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
         ^
615.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
616.         return -1;

libavformat/mov.c:617:10: Call
615.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
616.         return -1;
617.     buf= av_realloc(st->codec->extradata, size);
              ^
618.     if(!buf)
619.         return -1;

libavutil/mem.c:109:9: Assignment
  107.     /* let's disallow possible ambiguous cases */
  108.     if(size > (INT_MAX-16) )
  109.         return NULL;
               ^
  110. 
  111. #if CONFIG_MEMALIGN_HACK

libavformat/mov.c:617:5: Assignment
615.     if(size > INT_MAX || (uint64_t)atom.size > INT_MAX)
616.         return -1;
617.     buf= av_realloc(st->codec->extradata, size);
         ^
618.     if(!buf)
619.         return -1;

libavformat/mov.c:621:5: Assignment
619.         return -1;
620.     st->codec->extradata= buf;
621.     buf+= st->codec->extradata_size;
         ^
622.     st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
623.     AV_WB32(       buf    , atom.size + 8);

libavformat/mov.c:623:5: Array access: Offset: 3 Size: [0, 2147483631]
621.     buf+= st->codec->extradata_size;
622.     st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
623.     AV_WB32(       buf    , atom.size + 8);
         ^
624.     AV_WL32(       buf + 4, atom.type);
625.     get_buffer(pb, buf + 8, atom.size);
