cmdutils.c:460: error: Buffer Overrun L3
  Offset: [-1, 0] Size: [0, 2147483631] by call to `av_dict_set`.

cmdutils.c:456:14: Call
454.     av_strlcpy(opt_stripped, opt, FFMIN(sizeof(opt_stripped), p - opt + 1));
455. 
456.     if ((o = av_opt_find(&cc, opt_stripped, NULL, 0,
                  ^
457.                          AV_OPT_SEARCH_CHILDREN | AV_OPT_SEARCH_FAKE_OBJ)) ||
458.         ((opt[0] == 'v' || opt[0] == 'a' || opt[0] == 's') &&

libavutil/opt.c:700:1: Parameter `*obj`
  698. }
  699. 
  700. const AVOption *av_opt_find(void *obj, const char *name, const char *unit,
       ^
  701.                             int opt_flags, int search_flags)
  702. {

libavutil/opt.c:703:12: Call
  701.                             int opt_flags, int search_flags)
  702. {
  703.     return av_opt_find2(obj, name, unit, opt_flags, search_flags, NULL);
                  ^
  704. }
  705. 

libavutil/opt.c:706:1: Parameter `**target_obj`
    704. }
    705. 
    706. const AVOption *av_opt_find2(void *obj, const char *name, const char *unit,
         ^
    707.                              int opt_flags, int search_flags, void **target_obj)
    708. {

cmdutils.c:460:9: Call
458.         ((opt[0] == 'v' || opt[0] == 'a' || opt[0] == 's') &&
459.          (o = av_opt_find(&cc, opt + 1, NULL, 0, AV_OPT_SEARCH_FAKE_OBJ))))
460.         av_dict_set(&codec_opts, opt, arg, FLAGS);
             ^
461.     else if ((o = av_opt_find(&fc, opt, NULL, 0,
462.                               AV_OPT_SEARCH_CHILDREN | AV_OPT_SEARCH_FAKE_OBJ)))

libavutil/dict.c:68:1: <Offset trace>
66. }
67. 
68. int av_dict_set(AVDictionary **pm, const char *key, const char *value,
    ^
69.                 int flags)
70. {

libavutil/dict.c:68:1: Parameter `(*pm)->count`
  66. }
  67. 
  68. int av_dict_set(AVDictionary **pm, const char *key, const char *value,
      ^
  69.                 int flags)
  70. {

libavutil/dict.c:72:30: Call
  70. {
  71.     AVDictionary *m = *pm;
  72.     AVDictionaryEntry *tag = av_dict_get(m, key, NULL, flags);
                                   ^
  73.     char *oldval = NULL;
  74.     int allocated = !!m;

libavutil/dict.c:38:1: Parameter `m->count`
    36. }
    37. 
    38. AVDictionaryEntry *av_dict_get(const AVDictionary *m, const char *key,
        ^
    39.                                const AVDictionaryEntry *prev, int flags)
    40. {

libavutil/dict.c:68:1: <Length trace>
66. }
67. 
68. int av_dict_set(AVDictionary **pm, const char *key, const char *value,
    ^
69.                 int flags)
70. {

libavutil/dict.c:68:1: Parameter `*(*pm)->elems`
  66. }
  67. 
  68. int av_dict_set(AVDictionary **pm, const char *key, const char *value,
      ^
  69.                 int flags)
  70. {

libavutil/dict.c:105:13: Array access: Offset: [-1, 0] Size: [0, 2147483631] by call to `av_dict_set` 
  103.     if (value) {
  104.         if (flags & AV_DICT_DONT_STRDUP_KEY)
  105.             m->elems[m->count].key = key;
                   ^
  106.         else
  107.             m->elems[m->count].key = av_strdup(key);
