ffmpeg.c:1933: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp`.

ffmpeg.c:1529:13: Unknown value from: fprintf
1527.         os = output_files[i];
1528.         if (!os->nb_streams) {
1529.             fprintf(stderr, "Output file does not contain any stream\n");
                  ^
1530.             av_exit(1);
1531.         }

ffmpeg.c:1933:9: Call
1931.     }
1932.     if (want_sdp) {
1933.         print_sdp(output_files, nb_output_files);
              ^
1934.     }
1935. 

ffmpeg.c:1430:1: Parameter `sdp.strlen`
  1428. }
  1429. 
  1430. static void print_sdp(AVFormatContext **avc, int n)
        ^
  1431. {
  1432.     char sdp[2048];

ffmpeg.c:1434:5: Call
  1432.     char sdp[2048];
  1433. 
  1434.     avf_sdp_create(avc, n, sdp, sizeof(sdp));
            ^
  1435.     printf("SDP:\n%s\n", sdp);
  1436. }

libavformat/sdp.c:277:1: Parameter `buff->strlen`
    275. }
    276. 
    277. int avf_sdp_create(AVFormatContext *ac[], int n_files, char *buff, int size)
         ^
    278. {
    279.     struct sdp_session_level s;

libavformat/sdp.c:298:5: Call
    296.         }
    297.     }
    298.     sdp_write_header(buff, size, &s);
             ^
    299. 
    300.     dst[0] = 0;

libavformat/sdp.c:56:1: Parameter `buff->strlen`
      54. }
      55. 
      56. static void sdp_write_header(char *buff, int size, struct sdp_session_level *s)
          ^
      57. {
      58.     av_strlcatf(buff, size, "v=%d\r\n"

libavformat/sdp.c:67:5: Call
      65.                             s->start_time, s->end_time,
      66.                             s->name[0] ? s->name : "No Name");
      67.     dest_write(buff, size, s->dst_addr, s->ttl);
              ^
      68. }
      69. 

libavformat/sdp.c:45:1: Parameter `buff->strlen`
        43. };
        44. 
        45. static void dest_write(char *buff, int size, const char *dest_addr, int ttl)
            ^
        46. {
        47.     if (dest_addr) {

libavformat/sdp.c:49:13: Call
        47.     if (dest_addr) {
        48.         if (ttl > 0) {
        49.             av_strlcatf(buff, size, "c=IN IP4 %s/%d\r\n", dest_addr, ttl);
                        ^
        50.         } else {
        51.             av_strlcatf(buff, size, "c=IN IP4 %s\r\n", dest_addr);

libavutil/string.c:68:1: <LHS trace>
66. }
67. 
68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
69. {
70.     int len = strlen(dst);

libavutil/string.c:68:1: Parameter `size`
          66. }
          67. 
          68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
              ^
          69. {
          70.     int len = strlen(dst);

libavutil/string.c:74:12: <RHS trace>
72. 
73.     va_start(vl, fmt);
74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
75.     va_end(vl);
76. 

libavutil/string.c:74:12: Risky value from: vsnprintf
          72. 
          73.     va_start(vl, fmt);
          74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                         ^
          75.     va_end(vl);
          76. 

libavutil/string.c:74:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `print_sdp` 
          72. 
          73.     va_start(vl, fmt);
          74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                  ^
          75.     va_end(vl);
          76. 
