libavformat/mpegtsenc.c:640: error: Buffer Overrun L2
  Offset added: [157-min(152, `payload_size`), 218] (⇐ [157-min(152, `payload_size`), 187] + [0, 31]) Size: 188.

libavformat/mpegtsenc.c:494:1: <Offset trace>
492. 
493. /* NOTE: pes_data contains all the PES packet */
494. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
495.                              const uint8_t *payload, int payload_size,
496.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:494:1: Array declaration
492. 
493. /* NOTE: pes_data contains all the PES packet */
494. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
495.                              const uint8_t *payload, int payload_size,
496.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:622:9: Assignment
620.         }
621.         /* header size */
622.         header_len = q - buf;
             ^
623.         /* data len */
624.         len = TS_PACKET_SIZE - header_len;

libavformat/mpegtsenc.c:494:1: <Length trace>
492. 
493. /* NOTE: pes_data contains all the PES packet */
494. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
495.                              const uint8_t *payload, int payload_size,
496.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:494:1: Array declaration
492. 
493. /* NOTE: pes_data contains all the PES packet */
494. static void mpegts_write_pes(AVFormatContext *s, AVStream *st,
     ^
495.                              const uint8_t *payload, int payload_size,
496.                              int64_t pts, int64_t dts)

libavformat/mpegtsenc.c:640:17: Array access: Offset added: [157-min(152, payload_size), 218] (⇐ [157-min(152, payload_size), 187] + [0, 31]) Size: 188
638.             } else {
639.                 /* add stuffing */
640.                 memmove(buf + 4 + stuffing_len, buf + 4, header_len - 4);
                     ^
641.                 buf[3] |= 0x20;
642.                 buf[4] = stuffing_len - 1;
