ffserver.c:2150: error: Buffer Overrun L1
  Offset: [1, +oo] Size: 1 by call to `open_input_stream`.

ffserver.c:2150:29: Call
2148.                         av_close_input_file(c->fmt_in);
2149.                         c->fmt_in = NULL;
2150.                         if (open_input_stream(c, "") < 0)
                                  ^
2151.                             goto no_loop;
2152.                         goto redo;

ffserver.c:1956:1: Parameter `*info`
  1954. }
  1955. 
  1956. static int open_input_stream(HTTPContext *c, const char *info)
        ^
  1957. {
  1958.     char buf[128];

ffserver.c:1973:20: Call
  1971.             if (stream_pos == INT64_MIN)
  1972.                 return -1;
  1973.         } else if (find_info_tag(buf, sizeof(buf), "buffer", info)) {
                           ^
  1974.             int prebuffer = strtol(buf, 0, 10);
  1975.             stream_pos = av_gettime() - prebuffer * (int64_t)1000000;

libavformat/utils.c:3026:1: <Length trace>
3024. }
3025. 
3026. int find_info_tag(char *arg, int arg_size, const char *tag1, const char *info)
      ^
3027. {
3028.     const char *p;

libavformat/utils.c:3026:1: Parameter `*info`
    3024. }
    3025. 
    3026. int find_info_tag(char *arg, int arg_size, const char *tag1, const char *info)
          ^
    3027. {
    3028.     const char *p;

libavformat/utils.c:3031:5: Assignment
    3029.     char tag[128], *q;
    3030. 
    3031.     p = info;
              ^
    3032.     if (*p == '?')
    3033.         p++;

libavformat/utils.c:3044:13: Assignment
    3042.         q = arg;
    3043.         if (*p == '=') {
    3044.             p++;
                      ^
    3045.             while (*p != '&' && *p != '\0') {
    3046.                 if ((q - arg) < arg_size - 1) {

libavformat/utils.c:3045:20: Array access: Offset: [1, +oo] Size: 1 by call to `open_input_stream` 
    3043.         if (*p == '=') {
    3044.             p++;
    3045.             while (*p != '&' && *p != '\0') {
                             ^
    3046.                 if ((q - arg) < arg_size - 1) {
    3047.                     if (*p == '+')
