modules/http/http_filters.c:246: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `ap_get_mime_headers`.

modules/http/http_filters.c:246:5: Call
244.     r->headers_in = r->trailers_in;
245.     apr_table_clear(r->headers_in);
246.     ap_get_mime_headers(r);
         ^
247. 
248.     if(r->status == HTTP_OK) {

server/protocol.c:1194:1: Parameter `r->server->limit_req_fieldsize`
  1192. }
  1193. 
  1194. AP_DECLARE(void) ap_get_mime_headers(request_rec *r)
        ^
  1195. {
  1196.     apr_bucket_brigade *tmp_bb;

server/protocol.c:1198:5: Call
  1196.     apr_bucket_brigade *tmp_bb;
  1197.     tmp_bb = apr_brigade_create(r->pool, r->connection->bucket_alloc);
  1198.     ap_get_mime_headers_core(r, tmp_bb);
            ^
  1199.     apr_brigade_destroy(tmp_bb);
  1200. }

server/protocol.c:934:1: Parameter `r->server->limit_req_fieldsize`
    932. }
    933. 
    934. AP_DECLARE(void) ap_get_mime_headers_core(request_rec *r, apr_bucket_brigade *bb)
         ^
    935. {
    936.     char *last_field = NULL;

server/protocol.c:955:14: Call
    953. 
    954.         field = NULL;
    955.         rv = ap_rgetline(&field, r->server->limit_req_fieldsize + 2,
                      ^
    956.                          &len, r, 0, bb);
    957. 

server/protocol.c:216:1: <LHS trace>
214.  *        or a full buffer, that's considered an error.
215.  */
216. AP_DECLARE(apr_status_t) ap_rgetline_core(char **s, apr_size_t n,
     ^
217.                                           apr_size_t *read, request_rec *r,
218.                                           int fold, apr_bucket_brigade *bb)

server/protocol.c:216:1: Parameter `n`
      214.  *        or a full buffer, that's considered an error.
      215.  */
      216. AP_DECLARE(apr_status_t) ap_rgetline_core(char **s, apr_size_t n,
           ^
      217.                                           apr_size_t *read, request_rec *r,
      218.                                           int fold, apr_bucket_brigade *bb)

server/protocol.c:391:21: Binary operation: ([0, +oo] - 1):unsigned64 by call to `ap_get_mime_headers` 
      389.                     *read = n;
      390.                     /* ensure this string is terminated */
      391.                     (*s)[n-1] = '\0';
                               ^
      392.                     return APR_ENOSPC;
      393.                 }
