src/http/modules/ngx_http_log_module.c:935: error: Buffer Overrun L3
  Offset: [6, +oo] (⇐ 7 + [-1, +oo]) Size: [0, +oo] by call to `ngx_parse_size`.

src/http/modules/ngx_http_log_module.c:857:9: Call
855.     ngx_memzero(log, sizeof(ngx_http_log_t));
856. 
857.     n = ngx_http_script_variables_count(&value[1]);
             ^
858. 
859.     if (n == 0) {

src/http/ngx_http_script.c:214:1: Parameter `value->len`
  212. 
  213. 
  214. ngx_uint_t
       ^
  215. ngx_http_script_variables_count(ngx_str_t *value)
  216. {

src/http/modules/ngx_http_log_module.c:932:9: Assignment
930.         }
931. 
932.         name.len = value[3].len - 7;
             ^
933.         name.data = value[3].data + 7;
934. 

src/http/modules/ngx_http_log_module.c:935:15: Call
933.         name.data = value[3].data + 7;
934. 
935.         buf = ngx_parse_size(&name);
                   ^
936. 
937.         if (buf == NGX_ERROR) {

src/core/ngx_parse.c:11:1: <Offset trace>
 9. 
10. 
11. ssize_t
    ^
12. ngx_parse_size(ngx_str_t *line)
13. {

src/core/ngx_parse.c:11:1: Parameter `line->len`
   9. 
  10. 
  11. ssize_t
      ^
  12. ngx_parse_size(ngx_str_t *line)
  13. {

src/core/ngx_parse.c:19:5: Assignment
  17.     ngx_int_t  scale;
  18. 
  19.     len = line->len;
          ^
  20.     unit = line->data[len - 1];
  21. 

src/core/ngx_parse.c:11:1: <Length trace>
 9. 
10. 
11. ssize_t
    ^
12. ngx_parse_size(ngx_str_t *line)
13. {

src/core/ngx_parse.c:11:1: Parameter `*line->data`
   9. 
  10. 
  11. ssize_t
      ^
  12. ngx_parse_size(ngx_str_t *line)
  13. {

src/core/ngx_parse.c:20:12: Array access: Offset: [6, +oo] (⇐ 7 + [-1, +oo]) Size: [0, +oo] by call to `ngx_parse_size` 
  18. 
  19.     len = line->len;
  20.     unit = line->data[len - 1];
                 ^
  21. 
  22.     switch (unit) {
