libavformat/rtsp.c:1015: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/rtsp.c:1002:1: Parameter `buf.strlen`
1000. }
1001. 
1002. void ff_rtsp_send_cmd_with_content_async(AVFormatContext *s,
      ^
1003.                                          const char *method, const char *url,
1004.                                          const char *headers,

libavformat/rtsp.c:1015:5: Call
1013.     if (headers)
1014.         av_strlcat(buf, headers, sizeof(buf));
1015.     av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", rt->seq);
          ^
1016.     if (rt->session_id[0] != '\0' && (!headers ||
1017.         !strstr(headers, "\nIf-Match:"))) {

libavutil/avstring.c:82:1: <LHS trace>
80. }
81. 
82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
83. {
84.     int len = strlen(dst);

libavutil/avstring.c:82:1: Parameter `size`
  80. }
  81. 
  82. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
      ^
  83. {
  84.     int len = strlen(dst);

libavutil/avstring.c:88:12: <RHS trace>
86. 
87.     va_start(vl, fmt);
88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
89.     va_end(vl);
90. 

libavutil/avstring.c:88:12: Risky value from: vsnprintf
  86. 
  87.     va_start(vl, fmt);
  88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                 ^
  89.     va_end(vl);
  90. 

libavutil/avstring.c:88:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  86. 
  87.     va_start(vl, fmt);
  88.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
          ^
  89.     va_end(vl);
  90. 
