src/http/ngx_http_header_filter_module.c:480: error: Buffer Overrun S2
  Offset added: [max(1, `r->headers_out.charset.len`), +oo] (⇐ [0, +oo] + [max(1, `r->headers_out.charset.len`), `r->headers_out.charset.len`]) Size: [0, +oo].

src/http/ngx_http_header_filter_module.c:157:1: <Offset trace>
155. 
156. 
157. static ngx_int_t
     ^
158. ngx_http_header_filter(ngx_http_request_t *r)
159. {

src/http/ngx_http_header_filter_module.c:157:1: Parameter `r->headers_out.charset.len`
155. 
156. 
157. static ngx_int_t
     ^
158. ngx_http_header_filter(ngx_http_request_t *r)
159. {

src/http/ngx_http_header_filter_module.c:436:5: <Length trace>
434. 
435.     /* "HTTP/1.x " */
436.     b->last = ngx_cpymem(b->last, "HTTP/1.1 ", sizeof("HTTP/1.x ") - 1);
         ^
437. 
438.     /* status line */

src/http/ngx_http_header_filter_module.c:436:5: Assignment
434. 
435.     /* "HTTP/1.x " */
436.     b->last = ngx_cpymem(b->last, "HTTP/1.1 ", sizeof("HTTP/1.x ") - 1);
         ^
437. 
438.     /* status line */

src/http/ngx_http_header_filter_module.c:480:23: Array access: Offset added: [max(1, r->headers_out.charset.len), +oo] (⇐ [0, +oo] + [max(1, r->headers_out.charset.len), r->headers_out.charset.len]) Size: [0, +oo]
478.             b->last = ngx_cpymem(b->last, "; charset=",
479.                                  sizeof("; charset=") - 1);
480.             b->last = ngx_copy(b->last, r->headers_out.charset.data,
                           ^
481.                                r->headers_out.charset.len);
482. 
