libavformat/rtsp.c:934: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/rtsp.c:878:1: Parameter `transport.strlen`
876.  * @returns 0 on success, <0 on error, 1 if protocol is unavailable.
877.  */
878. static int
     ^
879. make_setup_request (AVFormatContext *s, const char *host, int port,
880.                     int lower_transport, const char *real_challenge)

libavformat/rtsp.c:934:17: Call
932.                      "client_port=%d", port);
933.             if (rt->transport == RTSP_TRANSPORT_RTP)
934.                 av_strlcatf(transport, sizeof(transport), "-%d", port + 1);
                     ^
935.         }
936. 

libavutil/string.c:68:1: <LHS trace>
66. }
67. 
68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
69. {
70.     int len = strlen(dst);

libavutil/string.c:68:1: Parameter `size`
  66. }
  67. 
  68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
      ^
  69. {
  70.     int len = strlen(dst);

libavutil/string.c:74:12: <RHS trace>
72. 
73.     va_start(vl, fmt);
74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
75.     va_end(vl);
76. 

libavutil/string.c:74:12: Risky value from: vsnprintf
  72. 
  73.     va_start(vl, fmt);
  74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                 ^
  75.     va_end(vl);
  76. 

libavutil/string.c:74:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  72. 
  73.     va_start(vl, fmt);
  74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
          ^
  75.     va_end(vl);
  76. 
