libavformat/rtsp.c:1053: error: Integer Overflow R2
  ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf`.

libavformat/rtsp.c:968:1: Parameter `transport.strlen`
966.  * @returns 0 on success, <0 on error, 1 if protocol is unavailable.
967.  */
968. static int make_setup_request(AVFormatContext *s, const char *host, int port,
     ^
969.                               int lower_transport, const char *real_challenge)
970. {

libavformat/rtsp.c:1053:13: Call
1051.             if (rt->server_type != RTSP_SERVER_REAL)
1052.                 av_strlcat(transport, "unicast;", sizeof(transport));
1053.             av_strlcatf(transport, sizeof(transport),
                  ^
1054.                      "client_port=%d", port);
1055.             if (rt->transport == RTSP_TRANSPORT_RTP &&

libavutil/avstring.c:69:1: <LHS trace>
67. }
68. 
69. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
    ^
70. {
71.     int len = strlen(dst);

libavutil/avstring.c:69:1: Parameter `size`
  67. }
  68. 
  69. size_t av_strlcatf(char *dst, size_t size, const char *fmt, ...)
      ^
  70. {
  71.     int len = strlen(dst);

libavutil/avstring.c:75:12: <RHS trace>
73. 
74.     va_start(vl, fmt);
75.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
               ^
76.     va_end(vl);
77. 

libavutil/avstring.c:75:12: Risky value from: vsnprintf
  73. 
  74.     va_start(vl, fmt);
  75.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
                 ^
  76.     va_end(vl);
  77. 

libavutil/avstring.c:75:5: Binary operation: ([0, +oo] + [0, +oo]):signed32 by call to `av_strlcatf` 
  73. 
  74.     va_start(vl, fmt);
  75.     len += vsnprintf(dst + len, size > len ? size - len : 0, fmt, vl);
          ^
  76.     va_end(vl);
  77. 
