src/http/modules/ngx_http_proxy_module.c:1323: error: Buffer Overrun S2
  Offset added: [max(1, `r->args.len`), +oo] (⇐ [0, +oo] + [max(1, `r->args.len`), `r->args.len`]) Size: [0, +oo].

src/http/modules/ngx_http_proxy_module.c:1128:1: <Offset trace>
1126. 
1127. 
1128. static ngx_int_t
      ^
1129. ngx_http_proxy_create_request(ngx_http_request_t *r)
1130. {

src/http/modules/ngx_http_proxy_module.c:1128:1: Parameter `r->args.len`
1126. 
1127. 
1128. static ngx_int_t
      ^
1129. ngx_http_proxy_create_request(ngx_http_request_t *r)
1130. {

src/http/modules/ngx_http_proxy_module.c:1295:5: <Length trace>
1293.     /* the request line */
1294. 
1295.     b->last = ngx_copy(b->last, method.data, method.len);
          ^
1296.     *b->last++ = ' ';
1297. 

src/http/modules/ngx_http_proxy_module.c:1295:5: Assignment
1293.     /* the request line */
1294. 
1295.     b->last = ngx_copy(b->last, method.data, method.len);
          ^
1296.     *b->last++ = ' ';
1297. 

src/http/modules/ngx_http_proxy_module.c:1323:23: Array access: Offset added: [max(1, r->args.len), +oo] (⇐ [0, +oo] + [max(1, r->args.len), r->args.len]) Size: [0, +oo]
1321.         if (r->args.len > 0) {
1322.             *b->last++ = '?';
1323.             b->last = ngx_copy(b->last, r->args.data, r->args.len);
                            ^
1324.         }
1325.     }
