src/http/ngx_http_header_filter_module.c:546: error: Buffer Overrun L3
  Offset: [0, 327692] Size: [0, +oo] by call to `ngx_sprintf`.

src/http/ngx_http_header_filter_module.c:430:5: Assignment
428. 
429.     /* "HTTP/1.x " */
430.     b->last = ngx_cpymem(b->last, "HTTP/1.1 ", sizeof("HTTP/1.x ") - 1);
         ^
431. 
432.     /* status line */

src/http/ngx_http_header_filter_module.c:546:23: Call
544. 
545.         if (clcf->keepalive_header) {
546.             b->last = ngx_sprintf(b->last, "Keep-Alive: timeout=%T" CRLF,
                           ^
547.                                   clcf->keepalive_header);
548.         }

src/core/ngx_string.c:95:1: Parameter `*buf`
  93. 
  94. 
  95. u_char * ngx_cdecl
      ^
  96. ngx_sprintf(u_char *buf, const char *fmt, ...)
  97. {

src/core/ngx_string.c:102:9: Call
  100. 
  101.     va_start(args, fmt);
  102.     p = ngx_vsnprintf(buf, /* STUB */ 65536, fmt, args);
               ^
  103.     va_end(args);
  104. 

src/core/ngx_string.c:123:1: <Length trace>
121. 
122. 
123. u_char *
     ^
124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
125. {

src/core/ngx_string.c:123:1: Parameter `*buf`
    121. 
    122. 
    123. u_char *
         ^
    124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
    125. {

src/core/ngx_string.c:244:25: Array access: Offset: [0, 327692] Size: [0, +oo] by call to `ngx_sprintf` 
    242.                 if (slen == (size_t) -1) {
    243.                     while (*p && buf < last) {
    244.                         *buf++ = *p++;
                                 ^
    245.                     }
    246. 
