libavformat/rtsp.c:860: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/rtsp.c:854:5: Call
852.     av_strlcpy(buf, cmd, sizeof(buf));
853.     snprintf(buf1, sizeof(buf1), "CSeq: %d\r\n", rt->seq);
854.     av_strlcat(buf, buf1, sizeof(buf));
         ^
855.     if (rt->session_id[0] != '\0' && !strstr(cmd, "\nIf-Match:")) {
856.         snprintf(buf1, sizeof(buf1), "Session: %s\r\n", rt->session_id);

libavutil/avstring.c:60:1: Parameter `dst->strlen`
  58. }
  59. 
  60. size_t av_strlcat(char *dst, const char *src, size_t size)
      ^
  61. {
  62.     size_t len = strlen(dst);

libavformat/rtsp.c:860:9: Call
858.     }
859.     if (rt->auth_b64)
860.         av_strlcatf(buf, sizeof(buf),
             ^
861.                     "Authorization: Basic %s\r\n",
862.                     rt->auth_b64);

libavutil/avstring.c:68:1: <LHS trace>
66. }
67. 
68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
69. {
70.     int len = strlen(dst);

libavutil/avstring.c:68:1: Parameter `size`
  66. }
  67. 
  68. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
      ^
  69. {
  70.     int len = strlen(dst);

libavutil/avstring.c:74:12: <RHS trace>
72. 
73.     va_start(vl, fmt);
74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
75.     va_end(vl);
76. 

libavutil/avstring.c:74:12: Risky value from: vsnprintf
  72. 
  73.     va_start(vl, fmt);
  74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                 ^
  75.     va_end(vl);
  76. 

libavutil/avstring.c:74:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  72. 
  73.     va_start(vl, fmt);
  74.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
          ^
  75.     va_end(vl);
  76. 
