libavformat/mpegtsenc.c:197: error: Buffer Overrun L2
  Offset added: [6, 372] (⇐ [5, 189] + [1, 183]) Size: 188 by call to `mpegts_write_section1`.

libavformat/mpegtsenc.c:184:1: Array declaration
182. } MpegTSWriteStream;
183. 
184. static void mpegts_write_pat(AVFormatContext *s)
     ^
185. {
186.     MpegTSWrite *ts = s->priv_data;

libavformat/mpegtsenc.c:197:5: Call
195.         put16(&q, 0xe000 | service->pmt.pid);
196.     }
197.     mpegts_write_section1(&ts->pat, PAT_TID, ts->tsid, 0, 0, 0,
         ^
198.                           data, q - data);
199. }

libavformat/mpegtsenc.c:125:1: Parameter `len`
  123. }
  124. 
  125. static int mpegts_write_section1(MpegTSSection *s, int tid, int id,
       ^
  126.                           int version, int sec_num, int last_sec_num,
  127.                           uint8_t *buf, int len)

libavformat/mpegtsenc.c:132:5: Assignment
  130.     unsigned int tot_len;
  131. 
  132.     tot_len = 3 + 5 + len + 4;
           ^
  133.     /* check if not too big */
  134.     if (tot_len > 1024)

libavformat/mpegtsenc.c:146:5: Call
  144.     memcpy(q, buf, len);
  145. 
  146.     mpegts_write_section(s, section, tot_len);
           ^
  147.     return 0;
  148. }

libavformat/mpegtsenc.c:70:1: <Offset trace>
68. 
69. /* NOTE: 4 bytes must be left at the end for the crc32 */
70. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
    ^
71. {
72.     unsigned int crc;

libavformat/mpegtsenc.c:70:1: Array declaration
    68. 
    69. /* NOTE: 4 bytes must be left at the end for the crc32 */
    70. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
        ^
    71. {
    72.     unsigned int crc;

libavformat/mpegtsenc.c:105:9: Assignment
    103.         q += len1;
    104.         /* add known padding data */
    105.         left = TS_PACKET_SIZE - (q - packet);
                 ^
    106.         if (left > 0)
    107.             memset(q, 0xff, left);

libavformat/mpegtsenc.c:70:1: <Length trace>
68. 
69. /* NOTE: 4 bytes must be left at the end for the crc32 */
70. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
    ^
71. {
72.     unsigned int crc;

libavformat/mpegtsenc.c:70:1: Parameter `len`
    68. 
    69. /* NOTE: 4 bytes must be left at the end for the crc32 */
    70. static void mpegts_write_section(MpegTSSection *s, uint8_t *buf, int len)
        ^
    71. {
    72.     unsigned int crc;

libavformat/mpegtsenc.c:103:9: Assignment
    101.             len1 = len;
    102.         memcpy(q, buf_ptr, len1);
    103.         q += len1;
                 ^
    104.         /* add known padding data */
    105.         left = TS_PACKET_SIZE - (q - packet);

libavformat/mpegtsenc.c:107:13: Array access: Offset added: [6, 372] (⇐ [5, 189] + [1, 183]) Size: 188 by call to `mpegts_write_section1` 
    105.         left = TS_PACKET_SIZE - (q - packet);
    106.         if (left > 0)
    107.             memset(q, 0xff, left);
                     ^
    108. 
    109.         s->write_packet(s, packet);
